Looking for a job

Arun Tomar

@aruntomar

Message

SOC Analyst monitoring customer networks with Splunk and investigating CrowdStrike Falcon detections.

India

Message

What I'm looking for

I’m looking to contribute to a security team focused on threat detection, investigation, endpoint security, and cloud SIEM monitoring, while continuing to grow as a SOC Analyst.

In my SOC Operations role, I monitor customer networks with Splunk SIEM and investigate endpoint alerts using CrowdStrike Falcon. I analyze security events, distinguish true positives from false positives, and escalate incidents with clear findings.

I create Splunk correlation searches, dashboards, and reports, and correlate Falcon alerts with SIEM logs to understand incident scope. I also investigate phishing emails, malicious domains, and IPs, and map detections to MITRE ATT&CK.

I use ServiceNow for incident tickets and follow-up, and have hands-on lab experience with Microsoft Azure Sentinel. My work also includes Linux command-line troubleshooting and investigating TLS/SSL certificate issues.

Experience

Work history, roles, and key accomplishments

Current

Security Analyst – SOC Operations

Current

Unknown

Sep 2024 - Present (2 years 2 months)

Working in a 24x7 Security Operations Centre, monitoring customer networks using Splunk SIEM and investigating endpoint alerts with CrowdStrike Falcon EDR. Performs real-time monitoring, investigation, analysis, reporting, and escalation of security events.