Looking for a job

Harsh Gandhi

@harshgandhi2

Message

I investigate security threats and reduce risk across SOC, cloud, application, and client environments.

United States

Message

What I'm looking for

I'm looking to investigate threats, improve detection and incident-response workflows, and reduce security risk across cloud, application, and enterprise environments.

I'm currently investigating identity, endpoint, network, and cloud security alerts at Intuit, reviewing more than 200 events each week. I analyze phishing, credential-compromise, account-takeover, malware, and suspicious-access activity to support escalation, containment, and remediation.

Previously at CodeNest Solutions, I assessed web applications, APIs, and cloud environments across 10+ client engagements, validating 100+ vulnerability findings and delivering practical remediation guidance. I've also built SIEM detection dashboards and correlation rules using WAZUH, QRadar, Sumo Logic, and Splunk, alongside IAM and threat-intelligence projects.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst

Current

Intuit

Feb 2026 - Present (7 months)

Triaged security alerts across identity, endpoint, network, and cloud telemetry, correlating anomalies to determine severity and escalate threats. Investigated phishing, credential-compromise, and account-takeover events, and supported incident response activities.

SOC Operations Security Monitoring Alert Triage Threat Detection incident investigation Incident Response Phishing Threat Intelligence Vulnerability Management

Cybersecurity Analyst

CodeNest Solutions

Jan 2022 - Dec 2023 (1 year 11 months)

Assessed client web applications, APIs, and cloud environments for security weaknesses, combining vulnerability scanning and manual validation. Investigated phishing, malware, and unauthorized access, and documented findings in client-facing reports.