Prathmesh Salunke

SOC Analyst

Ireland 2+ yrs exp 85 · Excellent

About

SOC Analyst (L1) with 2 years in a 24x7 Security Operations Center in Ireland. Skilled in alert triage and phishing and malware investigation across Microsoft Sentinel, Splunk and CrowdStrike, using basic KQL to cut false positives. Previously triaged 20+ alerts daily at 95% SLA compliance. BTL1 certified with an MSc in Cyber Security, seeking a SOC role in India.

Skills & Expertise (23)

Attention to Detail Intermediate

7.0/10

Years Exp

Analytical Thinking Intermediate

7.0/10

Years Exp

Teamwork Intermediate

6.8/10

Years Exp

MITRE ATT&CK framework Intermediate

6.8/10

Years Exp

Incident Response Intermediate

6.6/10

Years Exp

Malware Analysis Intermediate

6.2/10

Years Exp

Phishing Analysis Intermediate

6.0/10

Years Exp

Windows Intermediate

6.0/10

Years Exp

LINUX Intermediate

5.8/10

Years Exp

ServiceNow Ticketing Intermediate

5.6/10

Years Exp

Azure stakeholder communication Working Under Pressure written and verbal communication IP TCP Entra ID Microsoft Sentinel Alert Triage and Escalation CrowdStrike Microsoft Defender Log Analysis Splunk

Work Experience

SOC Analyst (L1)

Taoa Ireland Ltd

Oct 2024 - Sep 2026

Triaged alerts across SIEM and EDR tools (Microsoft Sentinel, Splunk, Microsoft Defender and CrowdStrike) in a 24x7 SOC, classifying each as a true or false positive and escalating confirmed incidents to L2 with clear notes so no re-checking was needed. Investigated phishing emails, malware execution, brute-force attempts, USB data exfiltration, lateral movement and suspicious Azure/Entra ID sign-ins, passing supporting evidence to L2 for containment decisions. Wrote basic KQL queries in Microsoft Sentinel to pull sign-in, device and email logs during triage, replacing manual log searching, ruling out false positives faster and giving L2 analysts escalations with the evidence already attached. Enriched alerts with OSINT (IP, URL and file reputation checks) and mapped activity to the MITRE ATT&CK Framework, making escalations easier for L2 analysts to follow. Managed incident tickets in ServiceNow within SLA and updated SOC runbooks and SOPs so the team worked from current procedures. Supported incident response (containment, root-cause analysis and post-incident reviews) with analysts and client stakeholders, and ran static and dynamic malware analysis in isolated VMs (FlareVM, REMnux) to confirm root cause.

Junior SOC Trainee

Direct on Demand

Apr 2022 - Jan 2023

Monitored and triaged 20+ real-time security alerts a day across Splunk and Azure Sentinel, logging, categorising and prioritising each one within SLA. Performed Level 1 SOC analyst duties: alert triage, classification, prioritisation and escalation to L2 analysts. Investigated phishing, malware, suspicious logins and unusual network activity using log analysis, TCP/IP traffic details and Windows and Linux endpoint data. Mapped alerts to MITRE ATT&CK techniques to give escalations clear context. Collected evidence and supported investigations under the guidance of senior SOC analysts. Sustained 95% SLA compliance within defined incident response processes.