Purushotham V. R

SOC Analyst

Bangalore 5+ yrs exp 80 · Excellent

About

No bio added yet

Skills & Expertise (22)

Microsoft Sentinel Advanced

9.0/10

0.5

Years Exp

Microsoft Defender Advanced

9.0/10

0.5

Years Exp

Incident Response Advanced

8.5/10

0.5

Years Exp

Vulnerability Scans Advanced

8.5/10

0.5

Years Exp

Vulnerability Management Advanced

8.5/10

0.5

Years Exp

Threat Hunting Advanced

8.0/10

0.5

Years Exp

Phishing Analysis Advanced

8.0/10

0.5

Years Exp

IOC Analysis Advanced

8.0/10

0.5

Years Exp

Alert Triage Advanced

8.0/10

0.5

Years Exp

risk assessments Advanced

8.0/10

0.5

Years Exp

patch management Advanced

8.0/10

0.5

Years Exp

Security alerts Advanced

8.0/10

0.5

Years Exp

Log Analysis Advanced

8.0/10

0.5

Years Exp

Unauthorized access Advanced

8.0/10

0.5

Years Exp

Security Threats Advanced

8.0/10

0.5

Years Exp

Symantec Endpoint Protection Intermediate

7.5/10

0.5

Years Exp

Incident analysis security incidents Whitelisting Endpoint Detection SIEM ServiceNow

Work Experience

SOC Analyst

Tata Consultancy Services (TCS)

Sep 2023 - Present

Monitor, investigate, and respond to security alerts generated through Microsoft Sentinel. Perform security event triage and incident analysis involving malware infections, brute-force attacks, unauthorized access attempts, and suspicious activities. Conduct phishing email investigations by analyzing headers, attachments, URLs, domains, and indicators of compromise (IOCs). Analyze logs from endpoints, servers, network devices, and cloud platforms to identify security threats. Utilize Microsoft Defender to investigate endpoint detections and coordinate remediation activities. Created incident reports and documented findings, root causes, and remediation recommendations. Worked with internal IT teams to contain and remediate security incidents. Utilized Microsoft Defender to investigate endpoint threats and security alerts. Assisted in tuning SIEM rules and reducing false-positive alerts. Act as backup administrator for Symantec Endpoint Protection, including whitelisting and blacklisting of domains, applications, URLs, and file hashes.

Vulnerability Management Support

Tata Consultancy Services (TCS)

Sep 2023 - Present

Perform authenticated and unauthenticated vulnerability scans using Rapid7 InsightVM. Identify, assess, prioritize, and track vulnerabilities based on CVSS score, exploitability, and business impact. Coordinate with infrastructure, server, network, and application teams to ensure timely remediation of vulnerabilities. Conduct vulnerability validation and post-remediation scans to verify successful mitigation. Generate executive and technical vulnerability reports highlighting risk exposure and remediation status. Track remediation SLAs and support compliance and audit requirements. Perform asset discovery and maintain vulnerability coverage across enterprise assets. Support patch management activities by providing remediation recommendations and risk assessments. Participate in vulnerability review meetings and provide technical guidance on remediation strategies.