Shailja Poddar

Entry-level SOC Analyst / Blue Team roles

Delhi, India 2+ yrs exp 91 · Outstanding

About

Final-year Software Engineering student (DTU, CGPA 7.6) with hands-on SOC experience: built and operated a multi-VM home lab that detects brute-force and credential-dumping attacks within seconds, using Wazuh, Sysmon, and MITRE ATT&CK, with automated SOAR response via Shuffle. Skilled in SIEM monitoring, log correlation, alert triage, and incident response. Actively seeking entry-level SOC Analyst / Blue Team roles.

Skills & Expertise (40)

Alert Triage Advanced

9.1/10

0.5

Years Exp

log correlation Advanced

9.1/10

0.5

Years Exp

Threat Detection Advanced

9.1/10

0.5

Years Exp

SIEM Monitoring Advanced

9.1/10

0.5

Years Exp

Threat Hunting Advanced

8.6/10

0.5

Years Exp

Incident Response Advanced

8.6/10

0.5

Years Exp

Endpoint Security Advanced

8.6/10

0.5

Years Exp

Python Intermediate

8.1/10

Years Exp

Kali Linux Intermediate

8.1/10

Years Exp

Git Intermediate

7.6/10

Years Exp

SQL Intermediate

7.1/10

Years Exp

Windows Server Intermediate

7.1/10

Years Exp

OWASP Top 10 Intermediate

7.0/10

Years Exp

Bash JavaScript PowerShell C++ Hydra Burp Suite Nmap Tcpdump WIRESHARK Shuffle Sysmon Wazuh Anomaly Detection Web Security IPS IDS Network Protocols HTTP/S DNS IP TCP GitHub Ubuntu MITRE ATT&CK SOC Operations detection engineering Security event analysis

Work Experience

Attack Simulation & Detection Engineering

SOC Home Lab

Jan 2026 - Present

Designed and deployed a multi-VM SOC environment simulating real-world attack scenarios, enabling SIEM monitoring, log correlation, and alert triage; processed 1000+ log events across brute-force (Hydra) and credential-dumping simulations. Performed alert triage and threat analysis on simulated attacks; engineered custom Wazuh detection rules reducing false positives by ~30% through rule tuning, with automated SOAR response via Shuffle — VirusTotal enrichment → Slack alert → simulated firewall block. Mapped TTPs to MITRE ATT&CK (T1110, T1003) and produced per-attack incident timelines; achieved brute-force detection within seconds of attack onset. Investigated security events and correlated logs across endpoints to identify attack patterns, documenting findings in analyst-style writeups for reproducibility.

Developer

Intrusion Detection Log Analyzer

Jan 2026 - Present

Built a C++ tool to parse system and application logs and surface indicators of compromise (IOCs), including failed authentications and privilege escalation attempts. Implemented signature-based pattern matching with extensible rule definitions, enabling fast adaptation to new threat signatures. Applied compiler-level optimisations for error handling, improving runtime efficiency and reliability of the detection pipeline.

Researcher

Behavior-Based Continuous Authentication

Jan 2025 - Present

Researched passive, continuous user authentication using keystroke dynamics, mouse movement, and browser fingerprinting to detect session hijacking and account takeover — directly applicable to insider-threat and anomaly-based detection use cases. Applied unsupervised learning models (Isolation Forest, LOF, Autoencoder) to flag anomalous behavioral patterns in real time without interrupting the user session. Documented methodology, experimental results, and findings in a research paper accepted at ICDAM 2026, covering threat modelling, model evaluation, and security implications.