Pavan Munigoti

L1 SOC Analyst

Chennai, India 3+ yrs exp 78 · Very Good

About

Cybersecurity operations professional with 3.5 years of experience in SOC monitoring, SIEM implementation, threat analysis, and incident response across enterprise environments at Infosys and Capgemini. Hands-on expertise across SIEM platforms (Wazuh, Securonix, Splunk, LogRhythm), EDR tools (SentinelOne), and perimeter security including firewalls (Palo Alto Networks, FortiGate, Checkpoint, Cisco FTD) and SSE/proxy solutions (Zscaler – Internet Access, Private Access, Digital Experience). Skilled in phishing investigation, alert triage, UEBA-based behavioural analysis, and MITRE ATT&CK-aligned threat detection. Actively practising on HackTheBox, TryHackMe, and LetsDefend with personal projects in cloud security and SIEM detection.

Skills & Expertise (27)

Alert Triage Advanced

8.0/10

3.5

Years Exp

SOC Monitoring Advanced

8.0/10

3.5

Years Exp

Phishing Investigation Advanced

7.5/10

3.5

Years Exp

Incident Documentation Advanced

7.0/10

3.5

Years Exp

Splunk Intermediate

7.0/10

Years Exp

NIST incident response lifecycle Advanced

7.0/10

3.5

Years Exp

MITRE ATT&CK Advanced

7.0/10

3.5

Years Exp

Wazuh Intermediate

6.5/10

Years Exp

Azure Sentinel Intermediate

6.5/10

Years Exp

Windows LINUX Metasploit Nmap WIRESHARK OWASP Top 10 Brute-force Detection IOC Analysis SentinelOne EDR Zscaler Cisco FTD Checkpoint FortiGate Palo Alto Networks LogRhythm Seceon SIEM Securonix SIEM SOP Execution

Work Experience

L1 SOC Analyst

Capgemini Private Limited

Aug 2024 - Present

Monitored and triaged SIEM-generated security alerts from multiple log sources, prioritising by severity, risk score, and behavioural indicators in line with SOC standard operating procedures. Investigated endpoint and server alerts on SentinelOne EDR, identifying malware detections and suspicious process activity, and escalated confirmed incidents to L2 analysts with complete investigation context. Reviewed and managed firewall logs and policies across Palo Alto Networks, FortiGate, Checkpoint, and Cisco FTD platforms to analyse traffic anomalies, security policy violations, and threat indicators, supporting perimeter and network-level threat detection. Implemented and supported SSE capabilities – Internet Access, Private Access, and Digital Experience – and led project/change implementation and incident troubleshooting on Zscaler proxy solutions. Conducted phishing investigations by examining email headers, embedded URLs, and artifact indicators to assess malicious intent and determine scope of impact. Identified and reduced false positives by analysing alert trends, detection logic gaps, and behavioural patterns across SIEM, EDR, and firewall data sources. Applied knowledge of Securonix and LogRhythm SIEM workflows, including UEBA-driven detections, risk scoring, and use-case implementation, to improve L1 triage accuracy and detection effectiveness. Documented all investigation steps, findings, and outcomes in the incident management system to maintain audit-ready records and support team knowledge continuity.

Cybersecurity Training (Full-Time)

Quality Thoughts

Mar 2024 - Aug 2024

Completed an intensive full-time cybersecurity training programme covering network security, ethical hacking, vulnerability assessment, and SOC analyst workflows. Gained practical experience through hands-on labs on HackTheBox, TryHackMe, and LetsDefend, simulating real-world threat detection and incident response scenarios. Built personal security projects to reinforce applied skills, including a Splunk SIEM detection lab with MITRE ATT&CK-mapped correlation rules.

L1 SOC Analyst

Infosys

Sep 2022 - Mar 2024

Monitored security events and alerts across SIEM platforms, detecting and analysing cybersecurity threats including phishing campaigns, malware execution, and unauthorised access attempts. Performed Level 1 incident triage and risk-based classification, executing security playbooks aligned with the NIST Incident Response Lifecycle. Analysed logs from endpoints, network devices, and cloud environments to extract Indicators of Compromise (IOCs) and detect suspicious behavioural patterns. Escalated high-severity incidents to Tier 2 analysts with detailed investigation summaries, contextual evidence, and MITRE ATT&CK technique mappings. Conducted continuous monitoring of network, endpoint, and cloud environments to maintain security posture through proactive threat identification. Collaborated with cross-functional teams during incident response to support threat containment, remediation planning, and post-incident documentation.