Vishal Gorade

Cyber Security Analyst

Cipla Limited

Jul 2024 - Present

Use Splunk and Microsoft Sentinel daily to triage ~40–50 priority-based alerts per shift, applying strong practical knowledge of TCP/IP, DNS, HTTP/HTTPS, and VPN traffic to identify network-level threats within a 24x7 SOC. Analyze firewall, IDS/IPS, VPN, and proxy logs alongside EDR telemetry (CrowdStrike Falcon, Microsoft Defender for Endpoint) to correlate suspicious activity across source/destination IPs and affected hosts. Perform incident response and threat detection by conducting severity classification, evidence capture, and containment recommendations — host isolation, password resets, firewall rule changes — for confirmed threats. Investigate common cyber threats including phishing (15–20 weekly) and malware/endpoint alerts, analyzing headers, URLs, attachments, file paths, command lines, and process trees to determine true/false positives. Detect insider-threat and unauthorized-access indicators by analyzing authentication activity — brute-force attempts, failed logins, account lockouts, VPN anomalies, and impossible-travel patterns. Perform log analysis across Windows Security Events and Linux authentication logs to identify anomalous activity and support security administration awareness across both operating systems. Conduct IOC-based analysis on IPs, domains, URLs, and file hashes using VirusTotal, AbuseIPDB, and URLScan, and map findings to MITRE ATT&CK techniques to strengthen investigation context. Document 10+ incident tickets weekly in ServiceNow/Jira with investigation summary, evidence, impact analysis, and closure comments, maintaining strong analytical and documentation standards. Collaborate with Network, Wintel, Linux, Cloud, and Security Engineering teams on alert validation, containment, and remediation follow-up, applying troubleshooting and problem-solving skills across cross-team investigations. Participate in shift handovers, daily alert reviews, and SLA tracking, contributing to consistent SOC operational reporting.