Rutuja Khandake

SOC Analyst

Solapur, Maharashtra 1+ yrs exp 88 · Excellent

About

Cybersecurity Analyst with hands-on SOC L1 experience across security monitoring, alert triage, and vulnerability management. Skilled in Splunk and Wazuh (SIEM) for alert investigation, event correlation, and log-based threat analysis, and in Nessus for vulnerability assessment with CVE/CVSS-based validation and risk prioritization. Currently contributing to an AI SOC Agent project, applying AI-assisted workflows to automate alert triage and investigation. Working knowledge of Qualys VMDR concepts, patch management, cloud security (AWS & Azure), core networking (TCP/IP, DNS, HTTP/HTTPS, TLS, firewalls), and Windows/Linux security. Applies MITRE ATT&CK, NIST CSF, CIS Controls, and OWASP Top 10 to structure investigations and remediation. Strong technical documentation, analytical, and cross-team collaboration skills, with prior network operations experience adding a solid foundation in infrastructure and incident escalation.

Skills & Expertise (36)

Log Analysis Intermediate

7.5/10

Years Exp

Dashboards Intermediate

7.5/10

Years Exp

Remediation recommendations Intermediate

7.5/10

Years Exp

Incident Reports Intermediate

7.5/10

Years Exp

Vulnerability reports Intermediate

7.5/10

Years Exp

OWASP Top 10 Intermediate

7.5/10

Years Exp

CIS Controls Intermediate

7.5/10

Years Exp

NIST Cybersecurity Framework Intermediate

7.5/10

Years Exp

MITRE ATT&CK Intermediate

7.5/10

Years Exp

patch management Intermediate

7.5/10

Years Exp

Risk Prioritization Intermediate

7.5/10

Years Exp

CVE Intermediate

7.5/10

Years Exp

Alert Triage Intermediate

7.5/10

Years Exp

Event correlation Intermediate

7.5/10

Years Exp

Incident Investigation Intermediate

7.5/10

Years Exp

Threat Detection Intermediate

7.5/10

Years Exp

Splunk Intermediate

7.5/10

Years Exp

Wazuh Intermediate

7.5/10

Years Exp

Nessus Intermediate

7.5/10

Years Exp

CVSS scoring Intermediate

7.5/10

Years Exp

Linux Security Intermediate

6.5/10

Years Exp

AWS Intermediate

6.5/10

Years Exp

Microsoft Azure Intermediate

6.5/10

Years Exp

DNS Intermediate

6.5/10

Years Exp

Windows Security Intermediate

6.5/10

Years Exp

IAM Concepts Intermediate

6.5/10

Years Exp

Active Directory Intermediate

6.5/10

Years Exp

Network Segmentation Intermediate

6.5/10

Years Exp

Routing & Switching Intermediate

6.5/10

Years Exp

Firewalls Intermediate

6.5/10

Years Exp

TLS Intermediate

6.5/10

Years Exp

HTTPS Qualys VMDR HTTP IP TCP

Work Experience

Junior Cybersecurity Analyst

Two Elephants Technologies LLP

Jul 2026 - Present

Working on an AI SOC Agent project, contributing to the development and tuning of AI-assisted workflows for automated alert triage and investigation support. Monitor security events using Wazuh (SIEM), investigating alerts, correlating events, and performing log analysis to support active incident investigations — core SOC L1-L2 analyst functions. Perform vulnerability assessments on Windows, Linux, endpoint, and network assets using Nessus, validating findings using CVE/CVSS and prioritizing remediation by risk. Collaborate with Infrastructure and IT teams to remediate vulnerabilities and improve overall security posture. Prepare vulnerability assessment reports, remediation recommendations, dashboards, and technical documentation for stakeholders.

Cybersecurity Intern

Algoanalytics

Oct 2025 - Feb 2026

Performed SOC L1 Analyst work, monitoring and triaging security alerts using Splunk (SIEM) as part of daily security operations. Investigated security alerts through log analysis and event correlation in Splunk, supporting continuous security monitoring. Performed vulnerability assessments using Nessus and analyzed findings to identify security weaknesses across systems. Validated vulnerabilities using CVE/CVSS and supported remediation planning with technical recommendations. Classified and documented threats using the MITRE ATT&CK framework to strengthen structured incident analysis.

Graduate Engineer Trainee

Vodafone Idea Limited

Sep 2023 - Apr 2024

Monitored enterprise network infrastructure, analyzing system logs, alarms, and network events to identify operational and security issues. Supported incident investigation, technical troubleshooting, and root cause analysis in coordination with Network Operations teams. Assisted in change implementation and risk assessment while maintaining service availability across enterprise infrastructure. Prepared operational reports and incident documentation to support service reliability and compliance.

Network Operations Intern

Vodafone Idea Limited

Dec 2022 - Mar 2023

Assisted in monitoring telecom network infrastructure, reviewing logs, alarms, and performance metrics to identify anomalies. Supported incident analysis, issue escalation, and troubleshooting while working with Network Operations teams to ensure timely service restoration.