Niharika Suguru
SOC Analyst | Cybersecurity Analyst
About
Cybersecurity professional with 4+ years of experience in information security and Security Operations Center (SOC) activities. Experienced in investigating phishing, malware, suspicious-login, and endpoint alerts; correlating events across SIEM, EDR, and email-security tools; documenting investigations; and escalating confirmed incidents. Hands-on exposure to Microsoft Sentinel, Splunk, CrowdStrike Falcon, Qualys, KQL, Microsoft 365 security, and ServiceNow. Experienced in log-ingestion monitoring, endpoint sensor health checks, vulnerability remediation coordination, detection-rule tuning, and post-incident analysis.
Skills & Expertise (16)
Work Experience
Security Analyst / SOC Analyst
Tata Consultancy Services (TCS)
Oct 2021 - Present
Investigate phishing, malware, suspicious-login, and other security alerts by correlating evidence across SIEM, EDR, and email-security tools; escalate confirmed incidents with IOC details and investigation timelines. Manage incident records in ServiceNow, documenting triage steps, investigation findings, response actions, and escalation details to support auditability and follow-up. Perform daily SIEM and EDR health checks, monitoring log ingestion, endpoint sensor connectivity, and detection-rule integrity; investigate and resolve ingestion gaps. Monitor CrowdStrike Falcon alerts and endpoints, analyze process details and network activity, validate detections, and support threat containment and endpoint sensor troubleshooting. Support proxy-migration changes and troubleshoot endpoint connectivity to maintain security-tool communication and endpoint coverage. Conduct vulnerability scans using Qualys, coordinate with system owners to remediate high-risk findings, and perform scanner upgrades to improve coverage and performance. Configure and maintain Microsoft Sentinel dashboards and data connectors; develop KQL-based detection rules to improve security-event visibility. Review logs from firewalls, IDS/IPS, DLP, Azure AD, and Microsoft 365 / Office 365, correlating events to investigate potential threats. Perform post-incident analysis to identify detection gaps and recommend tuning to SIEM correlation rules and alert thresholds. Perform security-tool housekeeping and version upgrades in line with N-1 version-compliance requirements to support platform stability and vendor support.
Education
Bachelor of Technology (B.Tech) - Kakatiya University
- · Afghanistan
Certifications
No certifications added yet
