SRAVANI

SOC Analyst / Cybersecurity Trainee

Nellore, Andhra Pradesh 0+ yrs exp 86 · Excellent

About

Cybersecurity candidate with hands-on experience in DNS threat detection, SIEM, log analysis, and security monitoring. Worked with Wazuh, Sysmon, auditd, Zeek, and Wireshark through an ISRO-NRSC internship and independent SOC lab. Seeking a SOC Analyst / Cybersecurity Trainee role to apply skills in alert triage and incident investigation.

Skills & Expertise (33)

Python Advanced

8.0/10

Years Exp

Wazuh Intermediate

8.0/10

0.5

Years Exp

Alert Triage Intermediate

7.5/10

0.5

Years Exp

Pandas Intermediate

7.5/10

Years Exp

NumPy Intermediate

7.5/10

Years Exp

scikit-learn Intermediate

7.5/10

Years Exp

Isolation Forest Intermediate

7.5/10

0.5

Years Exp

XGBoost Intermediate

7.5/10

0.5

Years Exp

Detection Rules Intermediate

7.5/10

0.5

Years Exp

Incident Investigation Intermediate

7.0/10

0.5

Years Exp

Log Analysis Intermediate

7.0/10

0.5

Years Exp

Zeek Intermediate

7.0/10

0.5

Years Exp

WIRESHARK Intermediate

7.0/10

0.5

Years Exp

Grafana Intermediate

7.0/10

0.5

Years Exp

Auditd Intermediate

6.5/10

0.5

Years Exp

Sysmon Intermediate

6.5/10

0.5

Years Exp

Windows Event Logs Intermediate

6.5/10

0.5

Years Exp

Nmap Intermediate

6.5/10

0.5

Years Exp

LINUX Intermediate

6.0/10

0.5

Years Exp

Windows Intermediate

6.0/10

0.5

Years Exp

macOS Intermediate

6.0/10

0.5

Years Exp

Redis Intermediate

6.0/10

0.5

Years Exp

Loki Intermediate

6.0/10

0.5

Years Exp

Network Traffic Analysis Intermediate

6.0/10

0.5

Years Exp

Account monitoring Intermediate

6.0/10

0.5

Years Exp

Process monitoring Intermediate

6.0/10

0.5

Years Exp

SSH Intermediate

6.0/10

0.5

Years Exp

OSI Model Intermediate

5.5/10

0.5

Years Exp

HTTPS Intermediate

5.5/10

0.5

Years Exp

HTTP Intermediate

5.5/10

0.5

Years Exp

DNS Intermediate

5.5/10

0.5

Years Exp

IP Intermediate

5.5/10

0.5

Years Exp

TCP Intermediate

5.5/10

0.5

Years Exp

Work Experience

Cybersecurity Intern

National Remote Sensing Centre (NRSC), ISRO

Feb 2026 - Jun 2026

Designed a DNS threat detection baseline on RHEL using 10,000+ DNS records, engineering features like entropy, query frequency, NXDOMAIN ratio, and TTL anomalies. Trained Isolation Forest and XGBoost models to catch DNS tunneling, DGA domains, and beaconing behavior, then validated the pipeline through dashboards and alert visualizations. Took the validated system into production on RHEL 9.6 at NRSC, wiring together BIND9, Zeek, Grafana, Loki, Promtail, and Redis for near real-time SOC-style monitoring. Worked independently across the full pipeline — collection, detection logic, and alerting — coordinating with the ISD/SISG team on integration and review.

Enterprise Endpoint Security Monitoring & SIEM Lab

Self-directed home lab

Jan 2026 - Jan 2026

Set up Windows and Linux endpoints with Sysmon and auditd, feeding telemetry into a centralized Wazuh Manager for parsing, decoding, and storage. Wrote detection rules for repeated authentication failures, new or privileged account activity, and suspicious process execution. Ran L1-style alert triage on the detections I built — gathering evidence, judging severity, tuning out false positives, and writing up incident reports the way an analyst would.