Sushant Sutar

SOC Analyst

Pune, Maharashtra 1+ yrs exp 84 · Excellent

About

SOC Analyst with hands-on experience in Security Operations Center (SOC) monitoring, SIEM operations, incident response, threat detection, alert triage, log analysis, phishing investigation, IOC analysis, and incident documentation. Experienced with Splunk for security monitoring and log analysis across firewalls, WAF, proxy, VPN, IDS/IPS, endpoint security, Windows, Linux, applications, and AWS environments. Strong understanding of MITRE ATT&CK, OWASP Top 10, networking fundamentals, and threat intelligence.

Skills & Expertise (63)

Splunk Intermediate

7.5/10

Years Exp

Security Event Monitoring Intermediate

7.0/10

Years Exp

Log Analysis Intermediate

7.0/10

Years Exp

Windows Event Logs Intermediate

7.0/10

Years Exp

Phishing Investigation Intermediate

7.0/10

Years Exp

Incident Response Intermediate

7.0/10

Years Exp

Grafana Intermediate

6.5/10

Years Exp

LINUX Intermediate

6.5/10

Years Exp

Threat Intelligence Intermediate

6.5/10

Years Exp

SIEM Rule Tuning Intermediate

6.5/10

Years Exp

SQL Intermediate

6.0/10

Years Exp

REST APIs bootstrap UNIX Windows TCP IP DNS HTTP HTTPS OWASP Top 10 MITRE ATT&CK Vulnerability Assessment CSS Typescript Postman Jira OSticket SLA tracking Root Cause Analysis C# ASP.NET Angular SQL Server HTML .net MVC IPS Event correlation Alert Investigation Alert Triage Incident Classification IOC Analysis Incident Documentation ticket management escalation Firewall WAF Proxy VPN IDS ANY.RUN Email Gateway Endpoint Security Linux logs Application logs server logs AWS Logs CrowdStrike Falcon Microsoft Defender for Endpoint VirusTotal AbuseIPDB URLScan.io Hybrid Analysis

Work Experience

SOC Analyst Intern

CyberSecXperts

Jan 2026 - Jul 2026

Monitored and triaged 20+ security alerts daily in Splunk, assessed severity, investigated suspicious activity, and escalated incidents according to defined procedures. Investigated suspicious activity using timestamps, source and destination IP addresses, ports, users, URLs, actions, affected assets, and related historical events. Analyzed logs from firewalls, WAF, proxy, VPN, IDS/IPS, email gateways, endpoints, Windows/Linux systems, applications, and AWS environments. Investigated phishing and suspicious emails by reviewing sender details, URLs, attachments, headers, reputation, and user context. Validated Indicators of Compromise (IOCs) using VirusTotal, AbuseIPDB, URLScan.io, Hybrid Analysis, and ANY.RUN, documenting findings, containment recommendations, and incident closure summaries. Supported SIEM rule review and tuning and prepared incident summaries covering observations, threat trends, investigation outcomes, and response actions.

Software Engineer

Pine Labs Pvt. Ltd.

May 2025 - Sep 2025

Provided production and application support for business-critical fintech systems and handled incidents and service requests within defined SLAs. Used SQL/PLSQL, Unix/Linux logs, Grafana, Jira, and Postman for monitoring, troubleshooting, validation, API testing, and issue resolution. Performed root cause analysis and collaborated with DevOps and development teams to restore services and prevent recurring issues.

Software Developer

ThinkQuotient Software Pvt. Ltd.

Mar 2024 - Apr 2025

Developed and supported enterprise web applications using C#, ASP.NET, .NET MVC, Angular, TypeScript, HTML, CSS, and Bootstrap. Designed RESTful APIs using .NET Web API and worked with SQL Server databases, queries, testing, debugging, and query optimization. Collaborated in an Agile environment to resolve defects and deliver stable, scalable, and maintainable software solutions.