Arjun Saji

I am a SOC Analyst (L1) with hands-on experience investigating Linux and endpoint activity through log validation, timeline reconstruction, and evidence-based escalation.

At Amvion Labs I triaged 80–120 FortiSIEM alerts per shift, suppressed false positives, enriched IOCs, and produced clear RCA summaries and shift handovers to ensure investigation continuity.

I perform Splunk-based log ingestion validation, Linux authentication analysis, and reconstruct access timelines to distinguish human from automated behavior, documenting defensible conclusions for escalation.

I hold an M.Sc. in Cyber Security and multiple certifications including CEH v13, and I actively apply lab-based investigations and threat-context enrichment to improve SOC detection and response quality.