Open to opportunities

Navin Rehnius

@navinrehnius

SOC L2 Analyst at Infosys investigating phishing and malware threats with Microsoft Sentinel, Cortex XSOAR, and CrowdStrike Falcon.

India

Message

At Infosys, I monitor and triage security alerts in Microsoft Sentinel and process incidents through Cortex XSOAR (Demisto), including classification, enrichment, and SLA-based escalation.

I investigate user-reported phishing incidents and manage IOCs, including malicious IPs, domains, URLs, and file hashes. I also analyze threat campaign IOCs from CTI feeds.

Using CrowdStrike Falcon sandbox and Proofpoint TAP, I analyze URL, domain, and file reputations and investigate email threats such as phishing, malware delivery, and credential harvesting.

Previously, I supported secure web gateway incidents at Tata Consultancy Services (TCS) and conducted SIEM monitoring at Netcon Technologies India Pvt. Ltd. My experience includes incident management, log analysis, event correlation, and escalation.

Experience

Work history, roles, and key accomplishments

Current

SOC L2 Analyst

Current

Infosys

Sep 2024 - Present (2 years 1 month)

Monitored and triaged security alerts from Microsoft Sentinel, processed incidents through Cortex XSOAR, and investigated phishing incidents. Conducted IOC management and collaborated with SOC content engineering to tune analytics rules.

Microsoft Sentinel XSOAR Microsoft Defender For Endpoint CrowdStrike Falcon Cloud Security ProofPoint IOC Management Phishing Analysis Incident Management SLA Management SOC Operations

SOC L1 Analyst

Tata Consultancy Services

Feb 2022 - Sep 2024 (2 years 7 months)

Provided L1 technical support for enterprise secure web gateway/proxy incidents using Skyhigh Security. Managed full incident lifecycle in BMC Remedy and monitored endpoint and server security logs via Kibana.

Skyhigh Security BMC Remedy Kibana Incident Management SLA Management Log Analysis Event Correlation Security Monitoring

SOC L1 Analyst

Netcon Technologies India Pvt. Ltd.

Jul 2020 - Feb 2022 (1 year 7 months)

Conducted real-time SIEM monitoring using Rapid7 InsightIDR and Wazuh, and monitored security events from various network devices. Performed L1 SOC operations including alert validation, incident documentation, and SLA-based escalation.

Rapid7 InsightIDR Wazuh ELK Stack SIEM Incident Triage Log Analysis Event Correlation Security Monitoring SLA Management

Education

Degrees, certifications, and relevant coursework

Einstein College of Engineering

Bachelor of Engineering, Electronics & Communication Engineering

Grade: CGPA: 6.8

Bachelor of Engineering in Electronics & Communication Engineering from Einstein College of Engineering, affiliated with Anna University, completed in 2020.