Zain Malik

SOC Analyst / Information Security Analyst

Accenture Pvt Solution

Sep 2021 - Jul 2026

Performed 24/7/365 Security Operations Center (SOC) monitoring to detect, analyze, and respond to security incidents across enterprise environments. Actively monitored real-time security alerts across SIEM, EDR/XDR, email security, and network security tools. Monitored and triaged security alerts using Splunk SIEM across endpoints, servers, network devices, and email sources. Performed multi-source log correlation to identify suspicious activity patterns and potential security incidents. Reduced false positives and improved analyst efficiency by tuning Splunk alerts, correlation searches, and filters. Triaged and investigated endpoint alerts generated by SentinelOne EDR/XDR, identifying malware, ransomware, and suspicious activity. Analyzed process execution trees, parent-child relationships, command-line arguments, and file hash reputation; verified process legitimacy using hash, path, and execution context. Conducted deep PowerShell and process-level investigations to detect encoded commands, obfuscation, process injection, and malicious scripts. Isolated infected endpoints via EDR and initiated timely containment and remediation actions. Investigated Scheduled Tasks and Windows Registry modifications (Run Keys, Services, and Startup entries) to uncover unauthorized persistence mechanisms used by threat actors. Investigated Windows event logs, authentication logs, PowerShell logs, and process creation events to trace attacker activity. Analyzed Windows security alerts related to failed logins, account lockouts, suspicious authentication patterns, and privilege escalation attempts. Detected lateral movement across endpoints and servers by correlating remote login events, RDP connections, SMB activity, and credential misuse. Reviewed firewall, IDS/IPS, WAF, and proxy logs alongside EDR telemetry to identify Command & Control (C2) communication, scanning, exploitation attempts, suspicious web access, and data exfiltration. Investigated phishing alerts using Microsoft Defender for Office 365, analyzing email headers, sender reputation, URLs, and attachments to identify credential phishing, malicious links, and malware-laced attachments. Supported GRC functions including compliance audits and risk assessments, aligning daily security monitoring and incident response operations with ISO 27001 and SOC 2 standards.