Yash Raheja

IT Analyst

Malviya Nagar, South Delhi 2+ yrs exp 89 · Excellent

About

Security-focused IT professional with hands-on experience in SOC incident response, phishing investigation, and identity and endpoint management, seeking to grow into a dedicated security operations role. Skilled in triaging security alerts, managing Microsoft Defender email quarantine, and coordinating P1 incidents end-to-end within a global, multinational environment. CompTIA Security+ certified, with a working foundation across security operations, threat and vulnerability concepts, risk management, and identity and access management. Skilled in incident intake, prioritization, and escalation, following defined protocols in time-sensitive situations and documenting incidents, actions taken, and outcomes clearly and accurately. Hands-on administration of Active Directory, Microsoft Entra ID, and Microsoft Intune to support secure identity and Endpoint Management.

Skills & Expertise (16)

SOC incident response Advanced

9.0/10

Years Exp

Security Alert Triage Advanced

8.5/10

Years Exp

Phishing & Email Threat Analysis Advanced

8.5/10

Years Exp

Microsoft Defender Advanced

8.0/10

Years Exp

Access Control Advanced

8.0/10

Years Exp

Incident Management Advanced

8.0/10

Years Exp

Incident prioritization & escalation Advanced

8.0/10

Years Exp

Active Directory Advanced

8.0/10

Years Exp

Endpoint Security Advanced

8.0/10

Years Exp

Microsoft Entra ID Advanced

7.5/10

Years Exp

Microsoft Intune Advanced

7.5/10

Years Exp

Access Provisioning Advanced

7.5/10

Years Exp

ServiceNow Intermediate

7.0/10

Years Exp

Network Troubleshooting Intermediate

7.0/10

Years Exp

Windows troubleshooting Intermediate

7.0/10

Years Exp

Burp Suite Intermediate

6.5/10

Years Exp

Work Experience

IT Service Desk Analyst

Busch Group IT India Pvt. Ltd.

Oct 2024 - Present

Triaged SOC alerts globally as first responder, handling compromised accounts, unauthorized access attempts, and suspicious or infected devices, ensuring swift identification and containment. Investigated phishing emails reported by end-users, analyzing headers, links, and attachments to determine threat validity and remediate confirmed attacks. Managed Microsoft Defender email quarantine, reviewing flagged messages and releasing or blocking based on threat indicators and organizational policy. Led coordination on P1 incidents end-to-end, ensuring timely progress, clear communication, and thorough documentation until closure. Identified recurring patterns across SOC alerts and phishing incidents, flagging emerging risks and gaps to the security team to strengthen the organization's overall security posture. Coordinate real-time response to urgent security escalations across a 24/5, multinational operations environment, prioritizing and multitasking across concurrent alerts under time pressure. Administered user identities and endpoints across Active Directory, Microsoft Entra ID, Microsoft Intune, Exchange Admin Center, and Teams Admin Center, covering access provisioning and device compliance.