ROHITH K M

SOC Analyst

Bengaluru, India 4+ yrs exp 89 · Excellent

About

Results-driven SOC Analyst with 4+ years of experience in cybersecurity operations, incident response and threat intelligence. Skilled in 24/7 monitoring using SIEM tools, EDR solutions and phishing analysis. Proficient in investigating and mitigating security threats, ensuring enterprise security and enhancing SOC workflows.

Skills & Expertise (47)

SIEM tools Advanced

8.9/10

Years Exp

Splunk Advanced

8.7/10

Years Exp

Network Traffic Analysis Advanced

8.3/10

Years Exp

IDS/IPS Advanced

8.1/10

Years Exp

Firewall Advanced

8.1/10

Years Exp

Proofpoint DLP Scareware Jira ServiceNow Windows LINUX XSS SQL Injection Phishing Spoofing Sniffing brute force Dos DDoS ARP Spoofing Virus Worm Trojan Horse Ransomware Rootkit Adware Cyber Kill Chain WAF Proxy VPN Log Hunting EDR/XDR Symantec Endpoint Protection Malware Analysis Digital Forensics AITM Attack Detection MITRE ATT&CK Cisco Talos Intelligence Group Data loss prevention IBM QRadar CrowdStrike Falcon Microsoft Defender VirusTotal Alienvault IBM X-Force Exchange O365 Gateway ANY.RUN

Work Experience

SOC Analyst

Tata Consultancy Services

Feb 2022 - Present

24/7 Monitor and analyze security events using SIEM, EDR and other Security Platforms. Responding to the incidents and gathering additional information to resolve the issue or escalate the issue to the appropriate teams. Analyze security event data from the network (IDS, IPS, FIREWALL and SIEM). Using of security information event management (SIEM – IBM QRADAR, SPLUNK ENTERPRISE SECURITY) tool to document security breaches and responses daily. Perform Security SIEM Operational task - Analysis, filters, Reports. Responsible for True Positive incidents with Deep-dive analysis and with proper remediation. Identifying the false positive and working with appropriate team member for tuning of alerts. Detecting Suspicious Logs, Creating reports and Charts for easy understanding. Investigating on the reputation of IP addresses suspicious URL’s, files and hash files with the help of VIRUSTOTAL, Symantec Site review. Monitoring and resolving antivirus related alerts and detection for endpoints server with EDR. Analysis of Email based threats: Email header analysis and Spam/Phishing emails using EMAIL GATEWAY, MX Toolbox. Preparing incident report of the previous shift and submitting to team lead. Correlate data by researching logs, analyzing graphs and packet inspection to provide detailed report. Monitoring Indicator of compromise (IOC). Updating myself with latest security news. Hands on experience on Windows, Linux. Escalating issues to level2 and management when necessary. Generating and Making Daily, Weekly and Monthly reports and charts. Knowledge on architecture and components of SPLUNK ENTERPRISE SECURITY, IBM QRADAR. Good understanding on various alerts. Good understanding on various attacks such as XSS, SQL injection, Phishing, spoofing, Sniffing, Brute force, DOS, DDOS, ARP Spoofing etc. Good understanding on various malwares such as Virus, Worm, Trojan Horse, Ransom ware, Rootkit, Phishing, adware, scare ware etc. Follow all process, Standard operating procedures and instructions so that work is carried out in a controlled and consistent manner.