Niket Vaghela

I've built security operations solutions through internships at Linux World Informatics and Vault-Tec Security, including a pipeline that enriches raw IP addresses with GeoIP context and a real-time threat visualization dashboard built with Flask and Leaflet.js.

I automate threat-hunting workflows with Python, including ThreatFox API integration for collecting indicators of compromise. My hands-on SOC work includes Wazuh, Splunk, log analysis, incident response, threat intelligence, and packet analysis.

In my self-initiated SOC home lab, I deployed Wazuh monitoring for Windows endpoints and automated firewall blocks using Active Response scripts. I've also conducted web application vulnerability assessments, documented remediation guidance, and researched automated threat detection using SIEM, SOAR, and deception engineering.