Sushma M

SOC Analyst

Gadag, Karnataka, India 2+ yrs exp 85 · Excellent

About

Detail-oriented SOC Analyst with hands-on experience in security monitoring, threat detection, incident response, and log analysis using SIEM platforms including Splunk, Microsoft Sentinel. Skilled in investigating security incidents, analyzing suspicious activities, performing threat hunting, and conducting threat intelligence research using OSINT tools. Proficient in endpoint security, malware analysis, IOC investigation, and security event correlation. Strong understanding of cybersecurity principles, network protocols, and defensive security operations. Experienced in monitoring enterprise environments, identifying security threats, and supporting incident response activities in fast-paced SOC environments.

Skills & Expertise (38)

Microsoft Sentinel Intermediate

8.0/10

Years Exp

Splunk Intermediate

8.0/10

Years Exp

Log Analysis Intermediate

7.5/10

Years Exp

Incident Response Intermediate

7.5/10

Years Exp

Threat Hunting Intermediate

7.5/10

Years Exp

Threat Intelligence Intermediate

7.0/10

Years Exp

Endpoint threat detection Intermediate

7.0/10

Years Exp

Malware Analysis Intermediate

6.5/10

Years Exp

MITRE ATT&CK framework Intermediate

6.0/10

Years Exp

Security Operations Center Intermediate

6.0/10

Years Exp

Network traffic monitoring Intermediate

6.0/10

Years Exp

Packet Analysis Proxy Concepts VPN Firewall Concepts compliance reporting HTTPS Incident Management Windows Security Linux Fundamentals incident reporting Root Cause Analysis Security Documentation HTTP DNS IP TCP URLvoid CISCO Talos Shodan AbuseIPDB VirusTotal Endpoint Protection Endpoint Monitoring Microsoft Defender for Endpoint IOC Analysis Alert Triage Event correlation

Work Experience

SOC Analyst

Wipro Limited

Feb 2024 - May 2026

Monitor and analyze security alerts and events using SIEM platforms including Splunk, Microsoft Sentinel. Investigate phishing emails, malware infections, suspicious IP addresses, unauthorized access attempts, and security anomalies. Perform alert triage, validation, prioritization, and escalation based on severity and business impact. Support incident response activities including identification, containment, eradication, recovery, and post incident analysis. Conduct detailed log analysis and event correlation to identify suspicious behaviour and potential security threats. Perform threat hunting activities using indicators of compromise (IOCs) and threat intelligence feeds. Utilize OSINT platforms such as VirusTotal, AbuseIPDB, Shodan, Cisco Talos, and URLVoid during security investigations. Monitor and investigate endpoint security alerts using Microsoft Defender for Endpoint (MDE). Collaborate with network, infrastructure, and application teams to investigate and resolve security incidents. Assist in vulnerability assessments, security reviews, and compliance-related activities. Create incident reports, Root Cause Analysis (RCA) documents, and security investigation reports. Follow incident handling procedures aligned with cybersecurity best practices and the MITRE ATT&CK framework.