P N BINDU
SOC Analyst
About
Experienced SOC Analyst with 3.5 years of experience in security monitoring, threat detection, incident investigation, phishing analysis, malware analysis, and incident response. Hands-on experience with Splunk, Microsoft Defender XDR, Proofpoint, ServiceNow, and threat intelligence platforms. Skilled in SIEM monitoring, alert triage, IOC analysis, threat hunting, MITRE ATT&CK mapping, email security investigations, and security incident handling while ensuring SLA compliance and operational excellence.
Skills & Expertise (40)
Work Experience
Senior Analyst
Infosys
Apr 2024 - Feb 2025
Monitored endpoint security alerts for 5,000+ devices using Microsoft Defender for Endpoint, triaging 50+ alerts daily. Investigated malware, suspicious processes, abnormal PowerShell activity, and endpoint threats, containing 30+ confirmed incidents. Analyzed process information, user activity, IP addresses, domains, and file hashes. Performed initial incident classification based on severity and business impact, achieving 90%+ triage accuracy. Investigated alerts using SIEM and EDR data. Correlated endpoint and network events to identify suspicious activity. Executed incident containment actions such as account disablement and endpoint isolation across 25+ endpoints, reducing mean time to contain. Documented investigation steps, evidence, and resolution details. Used MITRE ATT&CK techniques to understand attacker behavior. Maintained SOC dashboards, incident queues, and SLA compliance, consistently meeting 95%+ SLA targets.
Senior Analyst
Capgemini
Dec 2022 - Jun 2023
Monitored security events and alerts using Splunk, leveraging advanced queries to correlate multi-vector logs and identify sophisticated attacker behavior. Investigated phishing emails, malicious URLs, suspicious attachments, and compromised accounts. Performed alert correlation using multiple log sources. Analyzed authentication and endpoint activity to determine potential account compromise. Used threat intelligence sources to investigate suspicious IP addresses, domains, and hashes. Performed basic threat hunting based on suspicious indicators. Investigated repeated authentication failures and unusual login locations. Led incident response containment and remediation activities, executing proactive threat hunting missions to identify sophisticated attacker behavior. Escalated confirmed security incidents with detailed investigation findings. Prepared daily and weekly SOC monitoring reports.
Senior Associate
Wipro
Nov 2019 - Sep 2022
Monitored security alerts and events using SIEM tools. Performed initial investigation and triage of security alerts. Analyzed Windows, firewall, VPN, proxy, and authentication logs. Investigated failed login attempts, brute-force activity, suspicious IP addresses, and unusual user behavior. Validated alerts and identified false positives based on available evidence. Investigated Indicators of Compromise (IOCs) such as IP addresses, domains, URLs, and file hashes. Created and updated security incidents in ServiceNow. Escalated high-severity incidents to L2/security teams. Maintained incident documentation and investigation notes. Followed defined SOC procedures, SLAs, and escalation processes.
Education
BE in Electronics and Communication - VDIT (VTU)
- · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (40)
Click a skill to find developers with the same skill
