Diya User

I’m a SOC Analyst Trainee with hands-on experience in Security Operations Center (SOC) monitoring, SIEM analysis, alert triage, threat detection, and incident response. I investigate security events using Wazuh, ELK Stack, and threat intelligence platforms like VirusTotal and AbuseIPDB.

I focus on turning raw telemetry into actionable decisions: analyzing authentication, network, and endpoint security logs; conducting Level-1 alert triage with event correlation and incident classification; and documenting incidents with clear shift handover reporting. I also map threats to the MITRE ATT&CK framework to strengthen analysis and response workflows.

Beyond monitoring, I build defensive tooling. I created a Wazuh-based SOC pipeline for SSH brute-force detection with automated IP enrichment and incident response actions, plus a Flask dashboard for real-time SOC monitoring. I also developed an AI-assisted SOC threat intelligence and detection platform using machine learning (Random Forest) and rule-based detection to classify malicious URLs and generate incident reports.