Rohit Nimbalkar

SOC Analyst

Pune 2+ yrs exp 85 · Excellent

About

SOC Analyst with 2+ years of experience in security monitoring, alert triage, log analysis, and initial incident investigation. Hands-on experience with Splunk and CrowdStrike Falcon. Skilled in phishing analysis, endpoint alert review, IOC analysis, and incident documentation. Follow SOC playbooks and escalate incidents requiring deeper investigation to the L2 team.

Skills & Expertise (14)

Splunk Intermediate

7.5/10

Years Exp

CrowdStrike Falcon Intermediate

7.5/10

Years Exp

Phishing Analysis Intermediate

7.0/10

Years Exp

IOC Analysis Intermediate

7.0/10

Years Exp

Malware Triage Intermediate

7.0/10

Years Exp

Log Analysis Intermediate

7.0/10

Years Exp

Firewall Intermediate

7.0/10

Years Exp

IDS Intermediate

7.0/10

Years Exp

IPS Intermediate

7.0/10

Years Exp

Endpoint logs Intermediate

7.0/10

Years Exp

MITRE ATT&CK Intermediate

7.0/10

Years Exp

Incident Response Lifecycle Intermediate

7.0/10

Years Exp

Evidence Documentation Intermediate

6.5/10

Years Exp

SOPs Intermediate

6.5/10

Years Exp

Work Experience

SOC Analyst

Devcons Software Solutions Pvt. Ltd

Jan 2024 - Present

Monitor security alerts in Splunk and CrowdStrike Falcon and perform initial triage using SOC playbooks. Search and correlate logs using IP addresses, usernames, timestamps, and related events to understand suspicious activity. Review firewall, IDS/IPS, email security, and endpoint logs during alert investigations. Investigate phishing emails by checking headers, sender details, URLs, and attachments. Review endpoint alerts for affected hosts, suspicious processes, file details, and recorded EDR actions. Check IP addresses, domains, URLs, and file hashes to support IOC analysis and alert validation. Assess evidence to identify true positives, false positives, or cases needing further investigation. Create and update incident tickets with investigation steps, evidence, findings, actions, and verdicts. Escalate incidents requiring deeper investigation to L2 with clear findings and supporting evidence. Follow standard operating procedures for incident handling, ticket updates, and closure checks.