Santhosh Kumar V

SOC Analyst

Chennai, Tamil Nadu 2+ yrs exp 78 · Very Good

About

SOC Analyst with 2.5+ years of experience monitoring, triaging, and investigating security alerts for financial-services clients in an MSSP environment. Hands-on across the full detection lifecycle with IBM QRadar, SentinelOne EDR, and Trend Vision One — including log analysis, IOC-based threat hunting, phishing investigation, correlation-rule tuning, and vulnerability management on Windows and Linux. CompTIA CySA+ and ISC2 CC certified. Currently building Microsoft Sentinel and KQL detection-engineering skills to extend into cloud-native SOC environments.

Skills & Expertise (8)

IBM QRadar Intermediate

7.5/10

2.5

Years Exp

SentinelOne Intermediate

7.5/10

2.5

Years Exp

Trend Vision One Intermediate

7.5/10

2.5

Years Exp

Phishing Analysis Intermediate

7.0/10

2.5

Years Exp

Nessus scanning Intermediate

7.0/10

2.5

Years Exp

MITRE ATT&CK Mapping Intermediate

6.0/10

2.5

Years Exp

SLA Management Intermediate

6.0/10

2.5

Years Exp

log triage

Work Experience

SOC Analyst

Net Access India Private Limited

Jul 2024 - Present

Triage and validate SIEM alerts and User Behavior Analytics (UBA) offenses in IBM QRadar, analyzing raw security payloads to distinguish true positives from false positives across a multi-client, financial-services environment. Perform IOC-based threat hunting and phishing/email threat analysis, escalating confirmed incidents per client SLA and MSSP escalation procedures. Tune SIEM correlation rules and QRadar building blocks to reduce false-positive volume and improve detection efficiency. Produce daily SOC operational reporting — EPS monitoring, offense trend analysis, and incident summaries — for client and internal stakeholders. Manage customer security requests and incident-related queries end-to-end, ensuring SLA-compliant resolution and reduce Conduct vulnerability scanning and assessment across Windows and Linux endpoints using Nessus, supporting the client vulnerability-management lifecycle.

SOC Analyst

Key Client Engagement — EID Parry India Limited

Present - Present

Owned SentinelOne EDR monitoring for the account: analyzed endpoint logs, verified asset coverage, and ensured accurate log forwarding/normalization into the SIEM. Reduced incident response time by 30% by closely following up with relevant teams to ensure SLA compliance. Implemented and managed DLP policies across SentinelOne and Trend Vision One. Managed and monitored 1,000+ endpoints in Trend Vision One and 100+ endpoints in SentinelOne. Identified and mitigated security threats using SentinelOne and Trend Micro. Maintained incident and VAPT trackers; coordinated cross-team remediation to SLA timelines and verified ITGC/ISMS control implementation with CIO/CEO sign-off. Configured and maintained DLP policies in Trend Vision One; automated recurring security reporting and led deep-dive timeline investigations for security incidents. Managed asset verification, SIEM log validation, and full policy lifecycle (creation, modification, deletion) in Trend Micro (Trend Vision One). Delivered consolidated monthly security reports spanning Trend Vision One, SentinelOne, SIEM ticket metrics, EPS statistics, and VAPT findings for client stakeholders.