Rupali Chandane

SOC Analyst L1

Mumbai, MH, India 3+ yrs exp 87 · Excellent

About

A detail-oriented SOC Analyst L1 with 3.3 years of experience in SOC operations, specializing in real-time security monitoring and alert analysis. Hands-on experience with SIEM tools for log analysis, threat detection, windows log analysis and identification of suspicious activities. Proficient in incident triage, initial investigation, and escalation, following established SOPs and SLA. Experience on SIEM (Security Information and Event Management) tools like Splunk. Experience on EDR (Endpoint Detection and Response) tools like MS Defender, CrowdStrike. Experience in tracking tickets on ServiceNow. Proficient in preparing weekly, monthly reports as per client requirement. Experience in Phishing Email Analysis. Experience in Vulnerability assessment using Qualys, scanning using Nessus.

Skills & Expertise (25)

Splunk Advanced

8.0/10

Years Exp

Microsoft Defender Intermediate

7.5/10

Years Exp

CrowdStrike Falcon Intermediate

7.5/10

Years Exp

Threat Detection Intermediate

7.0/10

Years Exp

Phishing Email Analysis Intermediate

7.0/10

Years Exp

Incident Response Intermediate

7.0/10

Years Exp

ServiceNow Intermediate

6.5/10

Years Exp

Firewall Intermediate

6.0/10

Years Exp

Nessus Iso GRC wheregoes Browserling URLScan.io MXToolbox AbuseIPDB VirusTotal Qualys Nmap MS Azure MS Teams IPS IDS Proxy Sentinel

Work Experience

SOC Analyst L1

Capgemini

May 2023 - Present

Monitored and analyzed real-time security alerts in a 24x7 SOC environment using Splunk, Sentinel, Microsoft Defender, and CrowdStrike Falcon. Performed log analysis across firewalls, IDS/IPS, web proxies, and endpoint security tools (Defender & CrowdStrike) to identify suspicious and malicious activities. Investigated security incidents, conducted root cause analysis, and escalated critical threats within defined SLA timelines. Executed alert triage and incident validation to reduce false positives and improve detection efficiency. Analyzed endpoint detection and response (EDR) alerts from Microsoft Defender Endpoint and CrowdStrike Falcon for malware, lateral movement, and persistence mechanisms. Performed phishing email investigations including header analysis, malicious attachment detonation, and URL analysis using email security tools and Defender. Implemented containment and remediation actions such as blocking malicious IPs, domains, hashes, and URLs on firewalls, proxies, EDR. Created, updated, and managed incident tickets using ticketing and case management platforms (ServiceNow). Utilized antivirus/anti-malware, vulnerability management, and infrastructure security tools across Windows environments, Active Directory, and network security controls.