Back to Developers
RAHMATH UNNISA

RAHMATH UNNISA

SOC Analyst

Mumbai 3+ yrs exp 86 · Excellent

About

Results-driven SOC Analyst with 3+ years of hands-on experience in security operations, threat detection, and incident response across enterprise environments. Proven expertise in leveraging SIEM, SOAR, and EDR platforms to detect, investigate, and mitigate advanced cyber threats. Skilled in malware analysis, threat hunting, and log correlation, with strong knowledge of MITRE ATT&CK, NIST frameworks, and cloud security. Adept at reducing false positives, improving detection logic, and strengthening organizational security posture through proactive monitoring and automation.

Skills & Expertise (33)

SIEM Monitoring Advanced
8.3/10
3
Years Exp
Splunk Advanced
8.1/10
3
Years Exp
Cortex Xsiam Advanced
7.9/10
3
Years Exp
Microsoft Sentinel Advanced
7.9/10
3
Years Exp
MITRE ATT&CK Advanced
7.8/10
3
Years Exp
SPL Cloudflare Imperva AWS Azure Python Bash KQL ProofPoint VirusTotal CISCO Talos MXToolbox Qualys FIM Tripwire Qualys Nessus Microsoft Defender for Office 365 Behavioral Analytics IOC Analysis Palo Alto Networks NDR Darktrace SentinelOne Microsoft Defender Cortex XSOAR Splunk SOAR IBM QRadar log correlation Alert Triage

Work Experience

SOC Analyst

Nayagara Technologies

Mar 2023 - Present

Monitored and analyzed security alerts across SIEM, EDR, NDR, and NGAV platforms, ensuring rapid detection and response to threats. Performed incident triage, investigation, containment, and remediation aligned with the NIST Incident Response framework. Conducted advanced threat hunting using KQL, SPL, and MITRE ATT&CK methodologies to identify anomalous behavior and hidden threats. Investigated security events using Cortex XSIAM (XQL queries) by correlating endpoint, network, and cloud telemetry. Designed and optimized detection rules and use cases to improve alert accuracy and reduce false positives. Performed endpoint forensics to analyze malware, persistence techniques, lateral movement, and privilege escalation. Managed and monitored Proofpoint email security, identifying phishing attacks and conducting header and payload analysis. Utilized tools such as VirusTotal, Cisco Talos, and MXToolbox for threat intelligence and IOC validation. Conducted log analysis across Windows and Linux systems to identify suspicious activities and security gaps. Monitored File Integrity Monitoring (FIM) tools like Qualys FIM and Tripwire to detect unauthorized system changes. Developed and maintained SOAR playbooks to automate incident response and improve operational efficiency. Generated SOC dashboards and reports (MTTD, MTTR, alert trends) for management insights and performance tracking. Collaborated with incident response teams by escalating validated incidents with detailed analysis and evidence. Performed daily health checks of SIEM/SOAR integrations to ensure continuous monitoring and workflow reliability.

Education

Bachelor of Science in Computer Science (B.Sc) - Osmania University

2019 - 2021 · Afghanistan

Certifications

No certifications added yet

Interested in this developer?

Profile Score Breakdown

📷 Photo 10/10
📄 Resume 10/10
💼 Job Title 10/10
✍️ Bio 10/10
🛠️ Skills 20/20
🎓 Education 10/10
⏱️ Experience 11/15
💰 Rate 0/5
🏆 Certs 0/5
Verified 5/5
Total Score 86/100

Profile Overview

Member sinceMar 2026

Availability Details

Visa Status

Citizen

Relocation

Open to Relocation