Shanmuga Sundaram B

SOC Analyst | Incident Responder | Threat Detection Engineer

Chennai, India 1+ yrs exp 84 · Excellent

About

SOC Analyst with nearly 2 years of hands-on experience in 24x7x365 SOC operations within MSSP environments. Experienced in SIEM monitoring, alert triage, event-log analysis, log correlation, incident investigation, IOC analysis, threat escalation, and security incident response. Hands-on experience with Rapid7 InsightIDR and FortiSIEM, supported by EDR, SOAR, threat intelligence, automation, vulnerability management, and network security capabilities. Strong understanding of MITRE ATT&CK, threat hunting, detection-rule tuning, and security operations workflows.

Skills & Expertise (38)

FortiSIEM Intermediate

8.4/10

Years Exp

Rapid7 InsightIDR Intermediate

8.4/10

Years Exp

Incident Investigation Intermediate

7.8/10

Years Exp

MITRE ATT&CK Intermediate

7.6/10

Years Exp

Threat Intelligence Intermediate

7.5/10

Years Exp

Python Intermediate

7.5/10

Years Exp

log correlation Intermediate

7.4/10

Years Exp

Email Security Monitoring Intermediate

7.2/10

Years Exp

Threat Hunting Intermediate

7.0/10

Years Exp

Active Directory Intermediate

6.8/10

Years Exp

Syslog Intermediate

6.5/10

Years Exp

Log Parsing Intermediate

6.5/10

Years Exp

Regex Intermediate

6.5/10

Years Exp

Firewalls Nmap CVE CVSS TCP IP DNS LINUX IDS IPS WAF Windows Tenable Nessus OSINT FortiSOAR Git REST APIs IOC Enrichment PowerShell IOC Analysis Seqrite Sophos EDR Microsoft Defender for Endpoint DNS Monitoring Alert Triage

Work Experience

SOC & Security Analyst

Schima Sysnet Group of Companies

Dec 2024 - Present

Spearheaded 24/7 threat monitoring operations across 300+ daily SIEM alerts using FortiSIEM and Rapid7 InsightIDR, achieving 100% containment within strict 15-minute SLA windows. Performed security alert triage and validation across SIEM and security monitoring sources, investigated suspicious activity, and supported timely threat escalation and incident response. Architected 15+ custom correlation rules and Regex-based log parsers, reducing false-positive alert volume by 30% and enhancing SOC operational efficiency. Orchestrated 40+ complex incident response workflows and performed forensic log investigations across VPN, Firewall, and Syslog sources, mapping threats to the MITRE ATT&CK framework. Automated threat intelligence and IOC enrichment pipelines using Python and FortiSOAR playbooks, achieving a 60% reduction in Mean Time to Respond (MTTR). Standardized vulnerability management across 25+ critical enterprise assets using Tenable Nessus, publishing executive compliance reports and SOC Standard Operating Procedures (SOPs).