Kiran Rohokale

Security Analyst 1

Secur View Systems Pvt Ltd. [Gruve.ai]

Oct 2023 - Jun 2026

Continuously monitor security alerts generated by IBM QRadar, Firewalls, WAF, IDS/IPS (Intrusion Detection/Prevention Systems), EDR (Crowdstrike) and antivirus solutions. Configured and managed alerts, reports, scheduled searches. Provided daily L1 operational updates and work status reports, monitored client incident SLAs, resolved incident-related queries, and participated in unplanned client calls to provide device status updates and detailed investigations for critical security incidents. Collaborated with internal teams to ensure timely incident response, accurate analysis, and SLA compliance. Onboarded device logs, performed log validation, coordinated with clients to collect additional security logs from endpoint devices, created incident cases, and generated reports as per business and security requirements. Analyses security events to identify potential security incidents of malicious activity. Created and finetuned security use cases based on the client's network hierarchy and security requirements to reduce false-positive alerts and improve detection accuracy. Document all aspects of security incidents, including the initial alert, investigation findings, actions taken, and lessons learned. Extensive experience in SOC operations, including advanced threat detection, incident triage, and end-to-end incident response. Strong expertise in SIEM platforms such as IBM QRadar, including log correlation and alert tuning. Hands-on experience with EDR and XSIAM solutions, managing security alerts, investigating endpoint threats, and performing rapid containment actions. Proficient in incident documentation and reporting, delivering daily, weekly, and monthly reports aligned with client and SLA requirements. Strong client-facing skills, including incident communication, escalation management, and ticket closure follow-ups. Collaborated with team members sharing knowledge, providing guidance on incident investigations, and seeking advice when required to ensure operational excellence. Hands-on experience with CrowdStrike EDR for investigating detected threats and supporting incident response activities.