Vimal kumar Muthu

Soc specialist

Hyderabad india $10/hr Remote Full-time 5+ yrs exp 85 · Excellent

About

No bio added yet

Skills & Expertise (82)

SIEM Intermediate

7.5/10

Years Exp

Log Analysis Intermediate

7.0/10

Years Exp

XDR Intermediate

6.5/10

Years Exp

EDR Intermediate

6.5/10

Years Exp

Threat Intelligence Intermediate

6.0/10

Years Exp

Networking Intermediate

6.0/10

Years Exp

Vulnerability Management Intermediate

6.0/10

Years Exp

PowerShell Intermediate

5.5/10

Years Exp

Python Intermediate

5.5/10

Years Exp

Splunk SPL Intermediate

5.0/10

Years Exp

Microsoft Defender Intermediate

5.0/10

Years Exp

CrowdStrike Falcon Intermediate

5.0/10

Years Exp

Cortex XDR Intermediate

5.0/10

Years Exp

Microsoft Sentinel Intermediate

5.0/10

Years Exp

KQL Intermediate

5.0/10

Years Exp

Patch Management Coordination Intermediate

4.5/10

Years Exp

Incident Management Intermediate

4.5/10

Years Exp

CVE analysis Intermediate

4.5/10

Years Exp

Vulnerability Assessment Intermediate

4.5/10

Years Exp

Risk Assessment Intermediate

4.5/10

Years Exp

SLA Management Intermediate

4.5/10

Years Exp

Jira Intermediate

4.5/10

Years Exp

ServiceNow Intermediate

4.5/10

Years Exp

Change Management Intermediate

4.5/10

Years Exp

IPS Intermediate

4.0/10

Years Exp

Cyber Kill Chain Intermediate

4.0/10

Years Exp

MITRE ATT&CK Intermediate

4.0/10

Years Exp

Endpoint Protection Intermediate

4.0/10

Years Exp

Email Security Gateway Intermediate

4.0/10

Years Exp

Antivirus Intermediate

4.0/10

Years Exp

VPN Intermediate

4.0/10

Years Exp

Proxy Intermediate

4.0/10

Years Exp

WAF Intermediate

4.0/10

Years Exp

IDS Intermediate

4.0/10

Years Exp

Firewalls Intermediate

4.0/10

Years Exp

Authentication Logs Intermediate

4.0/10

Years Exp

Routing Intermediate

4.0/10

Years Exp

Endpoint logs Intermediate

4.0/10

Years Exp

IOC Enrichment Intermediate

4.0/10

Years Exp

Threat Intelligence Platforms Intermediate

4.0/10

Years Exp

OSINT Intermediate

4.0/10

Years Exp

TCP Intermediate

4.0/10

Years Exp

IP Intermediate

4.0/10

Years Exp

OSI Model Intermediate

4.0/10

Years Exp

DNS Intermediate

4.0/10

Years Exp

DHCP Intermediate

4.0/10

Years Exp

HTTP Intermediate

4.0/10

Years Exp

HTTPS Intermediate

4.0/10

Years Exp

FTP Intermediate

4.0/10

Years Exp

SSH Intermediate

4.0/10

Years Exp

SNMP Intermediate

4.0/10

Years Exp

LDAP Intermediate

4.0/10

Years Exp

proxy logs Intermediate

4.0/10

Years Exp

Microsoft Azure Intermediate

4.0/10

Years Exp

Microsoft 365 security Intermediate

4.0/10

Years Exp

CIA Triad Intermediate

4.0/10

Years Exp

Defense in Depth Intermediate

4.0/10

Years Exp

Zero Trust Intermediate

4.0/10

Years Exp

Authentication Intermediate

4.0/10

Years Exp

Authorization Intermediate

4.0/10

Years Exp

Encryption Intermediate

4.0/10

Years Exp

Hashing Intermediate

4.0/10

Years Exp

digital signatures Intermediate

4.0/10

Years Exp

Security monitoring Intermediate

4.0/10

Years Exp

Alert Triage Intermediate

4.0/10

Years Exp

Incident Investigation Intermediate

4.0/10

Years Exp

Incident Response Intermediate

4.0/10

Years Exp

Threat Detection Intermediate

4.0/10

Years Exp

Threat Hunting Intermediate

4.0/10

Years Exp

IOC Analysis Intermediate

4.0/10

Years Exp

Root Cause Analysis Intermediate

4.0/10

Years Exp

False Positive Analysis Intermediate

4.0/10

Years Exp

Windows Event Logs Intermediate

4.0/10

Years Exp

Linux logs Intermediate

4.0/10

Years Exp

Active Directory Logs Intermediate

4.0/10

Years Exp

Firewall Logs Intermediate

4.0/10

Years Exp

VPN Logs Intermediate

4.0/10

Years Exp

DNS Logs Intermediate

4.0/10

Years Exp

Web Server Logs Intermediate

4.0/10

Years Exp

SMTP IBM QRadar Splunk

Work Experience

SOC Analyst

VBLP Tech Solutions Pvt Ltd

Jan 2023 - Present

Monitor security alerts and events generated from SIEM tools (e.g., Splunk, IBM QRadar). Perform initial triage and analysis of security alerts to identify potential threats or anomalies. Classify alerts as false positives or true positives based on standard operating procedures (SOPs) and playbooks. Assist in log analysis across various sources such as firewalls, endpoints, servers, DNS, Active Directory, and proxy systems. Follow documented processes and playbooks to respond to basic security incidents under supervision. Assist senior team members in preparing daily/weekly security reports. Adhere to SLA timelines for alert acknowledgment and initial response.

Cyber Security Specialist

Amazon Development Center

Jan 2023 - Jan 2024

Investigated and analyzed security events and alerts using SIEM platforms to identify potential security incidents and policy violations. Investigated security alerts from SIEM, XDR, EDR, email security, and endpoint security solutions. Conducted phishing email investigations by analyzing email headers, URLs, attachments, sender reputation, and indicators of compromise. Validated security alerts and distinguished true positives from false positives to reduce alert fatigue. Investigated security incidents involving malware, ransomware, brute-force attacks, suspicious logins, C2 communications, and lateral movement. Performed security log analysis across Windows, VPN, Firewall, Proxy, DNS, Web Server, Authentication, and Endpoint logs. Applied the MITRE ATT&CK Framework and Cyber Kill Chain methodology to classify attacker tactics and techniques. Monitored endpoint activity using Cortex XDR, Microsoft Defender for Endpoint, and CrowdStrike Falcon, and investigated endpoint detections.

Associate Support Engineer

Tech Mahindra Business Services

Jan 2022 - Jan 2023

Worked for Tech Mahindra on Google projects including Google's Bard AI and Robotics. Guided and instructed students/participants on building and programming robotics kits integrated with Google's Bard AI, simplifying complex AI and robotics concepts into easy-to-understand lessons. Provided hands-on training and troubleshooting support for robotics assembly, coding logic, and AI-based interactions, ensuring effective learning outcomes for all participants.