Open to opportunities

Bhawan Raj Khatri

@bhawanrajkhatri

Message

Aspiring SOC Analyst using Splunk/Wazuh log analysis to detect threats and support incident response.

Pakistan

Message

What I'm looking for

I’m looking for an entry-level SOC/security role where I can monitor SIEM alerts, perform log analysis, and improve detection using real-world threat patterns and SPL-based dashboards.

I’m a Computer Science undergraduate progressing through TryHackMe’s SOC Level 1 path, and I’m building real SOC skills through two concurrent remote internships. As an SOC Intern, I monitor SIEM alerts and triage potential threats in real time by analyzing Windows Event Logs and firewall logs, investigating failed login patterns, and flagging suspicious activity for escalation.

I’m also strengthening my detection mindset through hands-on projects—currently developing a Splunk Dashboard Studio dashboard for brute force attack detection using real SPL queries (EventCode 4625, timechart, and stats across source IPs and users). With a Google Foundation of Cybersecurity Professional Certificate and tools like Splunk, Wazuh, and Wireshark (basic), I enjoy turning logs into actionable insights and continuing to grow in incident detection and threat monitoring.

Experience

Work history, roles, and key accomplishments

Current

SOC Intern

Current

Secure Dev Labs

Jun 2026 - Present (0 months)

Monitor security alerts and events in SIEM tools, triaging potential threats in real time and supporting escalation of suspicious activity. Analyze Windows Event Logs and firewall logs to investigate failed login patterns.

SIEM Log Analysis Incident Response Threat Detection Windows Event Logs Security Triage

Current

Cybersecurity Intern

Current

Arch Technologies

Jun 2026 - Present (0 months)

Support the security team with vulnerability assessments and threat monitoring activities. Conduct log reviews to detect anomalies across network and endpoint systems.

Vulnerability Assessment Threat Detection Log Analysis Network Security Endpoint Security Anomaly Detection