Open to opportunities

Ashok Kumar Dandu

@ashokkumardandu

Message

SOC Analyst with 4+ years securing SIEM, hunting threats, and improving incident response.

India

Message

What I'm looking for

I want to strengthen a high-performing SOC by scaling SIEM/IDS-IPS detections, running threat hunts with MITRE ATT&CK, and driving faster triage via runbooks, playbooks, and automation.

I’m a detail-oriented SOC Analyst with 4+ years of experience in security monitoring, incident detection and response, and threat intelligence. I’ve built reliable detection and triage workflows using SIEM operations (Splunk, ELK Stack), IDS/IPS management, and threat hunting with the MITRE ATT&CK framework.

I reduce alert investigation time by 30% and new-hire ramp time by 25% through runbook development and standardized incident handling procedures. In my roles, I correlate alerts to reduce false positives, improve detection coverage across endpoint and network telemetry, and drive measurable MTTR improvements through thorough investigations, automation, and cross-functional collaboration.

Experience

Work history, roles, and key accomplishments

SOC Analyst I

IT Globe

Dec 2023 - Mar 2026 (2 years 3 months)

Monitored and analyzed security events with SIEM tools, correlating alerts to detect threats and reduce false positives via IDS/IPS fine-tuning. Authored SOC runbooks and used MITRE ATT&CK knowledge to improve detection coverage across endpoint and network telemetry.

SIEM Splunk ELK Stack IPS Incident Response Threat Hunting YARA Sigma Log Analysis Security Monitoring Threat Intelligence Monitoring

SOC Analyst I

Tech Mahindra

May 2021 - Oct 2023 (2 years 5 months)

Operated in a 24x7 SOC, triaging 20–35 SIEM/IDS/IPS alerts per day and escalating prioritized incidents to senior analysts. Built Splunk/ELK dashboards and conducted threat hunting using YARA rules and Sigma translations, contributing to rapid containment in enterprise incidents and supporting incident response playbook creation and Tier 1 training.