Open to opportunities

Chetan Patel

@chetanpatel2

Cybersecurity analyst specializing in SOC operations, threat detection, and incident investigation across enterprise environments.

United States

Message

What I'm looking for

I’m looking for a SOC/security role where I can run high-quality threat investigations with SIEM/EDR, improve detection and triage, and standardize MITRE ATT&CK–aligned incident response through clear playbooks and measurable impact.

I’m a cybersecurity analyst with hands-on SOC operations experience, focused on threat detection, incident investigation, and security monitoring across enterprise environments.

I validate threats through deep log analysis and security telemetry—analyzing authentication anomalies, malware activity, phishing attacks, and lateral movement using SIEM, EDR, IDS, and threat intelligence platforms.

In my current role at US Bank, I investigated suspicious login activity in Splunk SIEM and pivoted across Windows Security and VPN authentication logs, reducing false positives by 31% and improving alert triage time by 24%. I also performed host-level investigations in CrowdStrike Falcon EDR, reducing mean incident containment time by 27%, and improved malicious email investigation accuracy by 22% using Palo Alto WildFire sandbox detonation reports.

At Equifax, I strengthened incident triage by correlating Windows Security events, VPN authentication logs, and Kerberos ticket activity to identify compromised accounts, while using CrowdStrike Falcon EDR and Suricata telemetry to validate potential host compromise and lateral movement. I also contributed to improving MITRE ATT&CK–aligned incident response runbooks, increasing SOC investigation consistency and SLA adherence by 26%.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst

Current

US Bank

Aug 2024 - Present (1 year 9 months)

Investigated suspicious credit-bureau authentication activity in Splunk, pivoting across Windows Security and VPN logs to reduce false positives by 31% and improve alert triage time by 24%. Performed endpoint, phishing, and network telemetry investigations using CrowdStrike, Palo Alto WildFire, and Zeek, reducing mean containment time by 27% and improving malicious email investigation accuracy by

Splunk Palo Alto WildFire Zeek Threat Detection Triage IOC Tracking

Security Incident Response Specialist

Equifax

Mar 2021 - Jun 2024 (3 years 3 months)

Investigated suspicious authentication patterns in Splunk by correlating Windows Security (4624/4625), VPN authentication, and Kerberos ticket activity to validate abnormal logins and escalate confirmed incidents for containment. Conducted endpoint and network investigations using CrowdStrike Falcon EDR and Suricata telemetry, and enriched external phishing indicators in MISP to enable proactive I

Splunk Suricata MISP Kerberos Windows Event IDs (4624 4625)Phishing Incident Response

Full Stack Developer

Acceptiv Inc.

Dec 2019 - Jun 2020 (6 months)

Redesigned C#/.NET Core rule-processing to separate validation from pricing logic, improving decision transparency and reducing regression defects by 28%. Reworked Angular form orchestration and SQL Server 2019 data protection controls, improving completion rates by 22% and strengthening audit-focused data integrity during releases.

C# .NET Core Angular TypeScript SQL Server ASP.NET MVC Jira

Full Stack Developer

TELUS Health

Aug 2018 - Oct 2019 (1 year 2 months)

Refactored ASP.NET MVC admin workflows to reduce cross-module regression defects by 28% and shorten client configuration turnaround during peak enrollment cycles. Improved SQL Server performance and integrity via indexing and constraints (reducing correction tickets by 26%) and implemented role-tier authorization controls to eliminate unauthorized data exposure incidents.

ASP.NET MVC JavaScript AngularJS SQL Server RBAC Data Integrity Web Forms Validation IIS

Software Developer - Full Stack

Tata Consultancy Services Canada Inc

May 2017 - Jul 2018 (1 year 2 months)

Designed and launched a centralized C#/.NET 4.7 scoring engine with REST endpoints to standardize impact calculations, reducing scenario turnaround time by ~35%. Built an interactive AngularJS impact-mapping UI and refactored ASP.NET async controller pipelines to increase throughput by ~30% under stress conditions.

REST APIs AngularJS ASP.NET MVC Query Optimization

Software Developer - Full Stack

SHEA Business Solutions

Jan 2014 - Mar 2017 (3 years 2 months)

Redesigned AngularJS UI layers with role-based screens and dynamic validation rules, reducing user processing time by 25% and improving first-pass transaction accuracy by ~20%. Optimized SQL Server 2016 reporting workloads by refactoring queries and indexes (~35% faster) and improved reliability with TFS branch governance and gated merges (reducing first-week production defects by ~27%).