Nikhila Bandari
SOC ANALYST
About
Security Operations Center (SOC) Analyst with hands-on experience in enterprise cybersecurity, specializing in 24/7 incident response, threat detection, and vulnerability management. Proficient in leveraging security platforms such as Microsoft Sentinel, Microsoft Defender, BluSapphire SIEM, and FortiSOCaaS (Fortinet) to protect organizational assets. Experienced in strengthening identity and access security through Microsoft Entra ID, Conditional Access, and MFA enforcement. Adept at collaborating with infrastructure, application, and engineering teams to enhance detection logic, streamline SOC workflows, and deliver actionable security insights. Committed to improving organizational security posture through continuous monitoring, proactive threat hunting, and risk-based security initiatives.
Skills & Expertise (18)
Work Experience
Cyber Security Analyst
Birlasoft
Jan 2024 - Present
Performed continuous security monitoring and incident analysis in a 24/7 SOC environment using Microsoft Sentinel, Microsoft Defender, BluSapphire SIEM, and FortiCloud. Investigated security incidents including phishing attacks, malware detections, suspicious sign-ins, endpoint compromises, and anomalous network activity. Conducted in-depth log analysis and cross-platform correlation across endpoint, identity, cloud, network, and email security solutions to validate and classify security events. Performed threat hunting using KQL queries across Defender and Sentinel. Managed vulnerability remediation tracking using Microsoft Defender Vulnerability Management by analyzing CVEs and coordinating patch implementation with infrastructure and application teams. Configured and managed application whitelisting policies to enhance endpoint security and reduce unauthorized execution risks. Implemented and monitored Microsoft Entra ID Conditional Access policies, MFA enforcement, and identity risk detections to strengthen access control mechanisms. Investigated phishing emails through header analysis, URL inspection, attachment validation, and user impact assessment. Administered Privileged Access Management (PAM) using BeyondTrust Password Safe, ensuring secure credential vaulting, access approvals, and session monitoring. Configured and monitored endpoint protection policies using Microsoft Intune and Microsoft Defender for Endpoint, including Attack Surface Reduction (ASR) rules. Developed and maintained SOC documentation including incident response playbooks, investigation guidelines, and standard operating procedures (SOPs).
Education
B.Tech, CSE (AI & ML) - BVRIT Hyderabad College of Engineering for Women
2021 - 2024 · Afghanistan
Diploma, ECE (Communication Networks) - Government Institute of Electronics
2017 - 2021 · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (18)
Click a skill to find developers with the same skill
