Open to opportunities

Ashwin M7

@ashwinm7

Certified cybersecurity analyst specializing in SOC operations, incident response, threat hunting, and digital forensics.

India

Message

What I'm looking for

I am seeking SOC/IR roles where I can lead detection and response, work with modern security stacks, contribute to threat hunting, and grow professionally in a collaborative environment.

I am a certified cybersecurity analyst with hands-on SOC experience, focusing on incident response, threat hunting, and digital forensics. I have worked with Microsoft Sentinel, Splunk, Trellix, CrowdStrike, Netskope, and Forcepoint to detect and remediate threats.

In SOC roles I have monitored, analyzed, and responded to security alerts, ensured SLA compliance, and handled L2 critical investigations including RCA preparation and client communication. I perform endpoint remediation, malware removal, and validate system health post-remediation.

I have supported cloud activity monitoring and policy enforcement with CASB tools, managed DLP alerts and policy tuning to prevent data leakage, and created SIEM dashboards and visual reports for real-time visibility. I follow MITRE ATT&CK, OWASP Top 10, and SOC playbooks to improve detection logic and reduce false positives.

I hold a BE in Computer Engineering and certifications including CEH and SC-200 (in progress), and have contributed to cybercrime investigations and evidence handling with 65B certification practices. I seek to bring proactive threat detection and measurable risk reduction to security teams.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst L1/L2

Current

STL Digital

Sep 2024 - Present (1 year 2 months)

Monitor, triage, and respond to security alerts across Azure Sentinel, Wazuh, and Trellix, ensuring 100% SLA compliance; perform endpoint investigations, remediation, and threat advisory actions to reduce risk and maintain client security posture.

Azure Sentinel Wazuh Trellix HX Crowdstrike Incident Response SOAR Threat Hunting

SOC Engineer L1

Mindtech Services

Dec 2023 - Apr 2024 (4 months)

Monitored and correlated SIEM events to improve detection accuracy, conducted foundational threat hunting, and managed email security with Proofpoint to reduce phishing success rates.

SIEM Threat Hunting ProofPoint Vulnerability Management

Cyber Crime Investigator

Digital Task Force

Mar 2023 - Aug 2023 (5 months)

Supported digital forensics on mobile and computer systems for 5+ cybercrime cases, maintained chain of custody for evidence, and contributed technical analysis to investigation reports.