Vinayak Durgule

Cybersecurity Graduate Trainee (SOC L1)

Tata Consultancy Services (TCS)

May 2024 - Present

Monitored and analyzed real-time security alerts in a 24x7 SOC environment using Splunk (SIEM) and Microsoft Defender for Endpoint. Performed log analysis across firewalls, IDS/IPS, web proxies, and endpoint tools to detect and investigate suspicious or malicious activity. Investigated security incidents, conducted root cause analysis (RCA), and escalated threats within defined SLA timelines. Performed alert triage, incident validation, and escalation based on severity and organizational policies. Analyzed EDR alerts for malware activity, lateral movement, and persistence using Microsoft Defender. Conducted phishing investigations, including email header analysis, malicious attachment detonation, and URL/IOC analysis. Investigated email-borne threats using Mimecast, identifying spoofing, spam, and malicious payload attempts. Monitored and analyzed Data Loss Prevention (DLP) alerts via Zscaler to identify potential sensitive data leakage incidents. Managed incident tickets using ServiceNow, ensuring proper tracking, follow-up, and closure with relevant teams. Prepared daily, weekly, and monthly security reports summarizing alert trends and incident status. Executed automated incident response playbooks using FortiSOAR to accelerate alert enrichment, containment, and case closure across the SOC. Performed IOC validation using threat intelligence sources to support faster and more accurate incident classification. Supported vulnerability management activities by tracking identified vulnerabilities through remediation and coordinating patch follow-up with IT teams. Collaborated with cross-functional and higher-level teams during incident escalation, remediation, and tracking through to closure.