Shivani GM

SOC Analyst (Tier 1)

CGI

Aug 2025 - Present

Monitor security alerts and events in real time using SIEM tools, identifying and triaging potential threats across endpoints, network, and cloud logs. Perform initial investigation and severity classification of alerts, correlating log sources (firewall, IDS/IPS, EDR, authentication logs) to validate true positives versus false positives. Conducted end-to-end email security investigations, analyzing headers, URLs, attachments, sender reputation, and authentication mechanisms (SPF, DKIM, and DMARC) to detect and prevent phishing attempts. Investigated suspicious attachments and executables using sandbox analysis and threat intelligence feeds to identify malware behavior and attack vectors. Escalate confirmed incidents to Tier 2/senior analysts following defined SOPs and incident response playbooks, ensuring timely handoff with complete supporting evidence. Document investigation steps, findings, and resolution details in the ticketing system to maintain accurate incident records and support audit/compliance requirements. Assist with vulnerability scan reviews and basic threat intelligence lookups (IOC/IP/domain reputation checks) to support proactive threat identification. Collaborate with cross-functional IT and security teams during shift handovers to ensure continuity of ongoing investigations. Recommend enhancements to SOC security processes, procedures, and policies, improving the internal incident response process.