Sasanka Anaparti

L1 SOC Analyst

Bangalore $35/hr Remote Full-time 3+ yrs exp 93 · Outstanding

About

L1 Security Analyst with 3+ years of experience in Security Operations Center (SOC) environments, specializing in real-time threat monitoring, alert triage, and incident response across Microsoft security ecosystems. Proficient in analyzing Windows Event Logs, network telemetry, and endpoint data using Cortex and CrowdStrike tools (XDR). Experienced in identifying and correlating Indicators of Compromise (IoCs), mapping threats to the MITRE ATT&CK framework and handling phishing, malware and identity-based attacks. Skilled in KQL-based investigations, incident escalation and SLA-driven operations. Proven ability to reduce false positives, improve detection efficiency and support 24/7 security operations while collaborating with cross-functional teams.

Skills & Expertise (69)

Security monitoring Advanced

8.0/10

Years Exp

Log Analysis Advanced

8.0/10

Years Exp

SIEM tools Advanced

8.0/10

Years Exp

Security Log Analysis Advanced

8.0/10

Years Exp

Windows Event Logs Intermediate

7.5/10

Years Exp

CIA Triad Intermediate

7.5/10

Years Exp

Cyber Kill Chain Intermediate

7.5/10

Years Exp

Incident Response Intermediate

7.5/10

Years Exp

Splunk Intermediate

7.5/10

Years Exp

Kusto Query Language Intermediate

7.5/10

Years Exp

Detection Rules Intermediate

7.5/10

Years Exp

Vulnerability Assessment Intermediate

7.5/10

Years Exp

KQL Intermediate

7.5/10

Years Exp

MITRE ATT&CK Intermediate

7.5/10

Years Exp

IPS Intermediate

7.0/10

Years Exp

Encryption Intermediate

7.0/10

Years Exp

DHCP Intermediate

7.0/10

Years Exp

DNS Intermediate

7.0/10

Years Exp

SMTP Intermediate

7.0/10

Years Exp

SSH Intermediate

7.0/10

Years Exp

HTTPS Intermediate

7.0/10

Years Exp

HTTP Intermediate

7.0/10

Years Exp

Data Protection Intermediate

7.0/10

Years Exp

vulnerabilities Intermediate

7.0/10

Years Exp

Threats Intermediate

7.0/10

Years Exp

CrowdStrike Intermediate

7.0/10

Years Exp

Firewalls Intermediate

7.0/10

Years Exp

IDS Intermediate

7.0/10

Years Exp

IBM QRadar Intermediate

7.0/10

Years Exp

Incident tracking Intermediate

7.0/10

Years Exp

Microsoft Defender Intermediate

7.0/10

Years Exp

cybersecurity threats Intermediate

7.0/10

Years Exp

Incident escalation Intermediate

7.0/10

Years Exp

Threat Hunting Intermediate

7.0/10

Years Exp

CrowdStrike Falcon Intermediate

7.0/10

Years Exp

Web Application Firewalls Intermediate

7.0/10

Years Exp

malware Intermediate

7.0/10

Years Exp

Phishing Intermediate

7.0/10

Years Exp

Alert Triage Intermediate

7.0/10

Years Exp

Indicators of Compromise Intermediate

7.0/10

Years Exp

Antivirus Intermediate

7.0/10

Years Exp

Email Security Gateways Intermediate

6.5/10

Years Exp

Proxy Servers Intermediate

6.5/10

Years Exp

Hashing Intermediate

6.5/10

Years Exp

Encoding Intermediate

6.5/10

Years Exp

Cortex Intermediate

6.5/10

Years Exp

ServiceNow Intermediate

6.5/10

Years Exp

Switch Intermediate

6.5/10

Years Exp

SLA-driven operations Intermediate

6.5/10

Years Exp

Security Reports Intermediate

6.5/10

Years Exp

Networking Concepts Intermediate

6.5/10

Years Exp

IP Addressing Intermediate

6.5/10

Years Exp

OSI Model Intermediate

6.5/10

Years Exp

TCP Intermediate

6.5/10

Years Exp

UDP Intermediate

6.5/10

Years Exp

subnetting Intermediate

6.5/10

Years Exp

port numbers Intermediate

6.5/10

Years Exp

Hub Intermediate

6.5/10

Years Exp

FTP Intermediate

6.5/10

Years Exp

Router Intermediate

6.5/10

Years Exp

Static routing Intermediate

6.5/10

Years Exp

VPN Technologies Intermediate

6.5/10

Years Exp

VLAN Intermediate

6.5/10

Years Exp

Telnet Intermediate

6.5/10

Years Exp

RIP Intermediate

6.0/10

Years Exp

OSPF Intermediate

6.0/10

Years Exp

STP Intermediate

6.0/10

Years Exp

VTP Intermediate

6.0/10

Years Exp

EtherChannel Intermediate

6.0/10

Years Exp

Work Experience

SOC Analyst

Softalk Technologies Limited

Apr 2024 - Present

Performed real-time monitoring, investigation, analysis, reporting, and escalation of security events from multiple log sources using SIEM tools. Reviewed system, network, and application logs to identify suspicious activities and raised incident tickets to the respective platform teams for remediation. Followed up with platform teams to ensure timely resolution and closure of incident tickets based on SLA. Conducted security log analysis to detect unauthorized activities, potential threats, and policy violations. Differentiated false positives from genuine security incidents through detailed event correlation and investigation. Created and managed incident cases in ticketing tools, assigning them to appropriate teams based on severity and legitimacy. Participated in vulnerability assessment activities using automated and manual techniques to identify and assess security weaknesses. Maintained incident trackers and prepared weekly and monthly security reports for management and security teams. Researched and stayed updated with the latest cybersecurity threats, vulnerabilities, and IT security trends. Collaborated with SOC leads to fine-tune detection rules and alerts to improve monitoring efficiency and reduce false positives. Worked closely with cross-functional teams to strengthen the organization’s overall security posture.