ankur babele

I’m a results-driven SOC Analyst with 3+ years of hands-on experience in 24x7 Security Operations Center (SOC) environments, specializing in real-time threat monitoring, SIEM-driven log analysis, and incident response using Splunk. I investigate and triage security alerts across multiple log sources, reduce false positives by tuning Splunk correlation rules and SPL queries, and deliver thorough phishing email investigations and IOC-driven threat investigations using platforms like VirusTotal, URLScan.io, and MXToolbox.

I also build detection and investigation workflows—creating Splunk dashboards, reports, and correlation rules to improve SOC visibility—and support incident response with evidence collection and post-incident documentation aligned with NIST IR guidance. From a hands-on home SOC lab mapping scenarios to MITRE ATT&CK to proactive Windows threat hunting and structured vulnerability assessment labs using Nmap, Nessus Essentials, and Burp Suite, I bring a practical, measurable approach to securing enterprise environments.