Open to opportunities

Sangeetha Jm

@sangeethajm

SOC security operations associate specializing in SIEM monitoring, incident response, and email phishing investigations.

India

Message

What I'm looking for

I’m looking for a challenging position that fully utilizes my security operations skills and gives me suitable opportunities to grow my technical and communication skills while working toward organizational goals.

I’m a Security Operations professional with 3.2+ years of experience in SOC, covering security analysis, security monitoring, security incident management, and incident response. In 24*7 operations, I focus on detecting and preventing intrusion attempts and handling alerts through proper validation and closure.

I work hands-on with SIEM tools Exabeam and have basic exposure to Google SecOps (Chronicle) for monitoring alerts and analyzing security events. I perform daily SIEM health checks, verify log ingestion, and investigate suspicious activity by analyzing related logs and user activity.

I also manage email security investigations by analyzing phishing alarms reported by end users, checking email headers, attachments, and URLs. When alerts are confirmed malicious, I remove them from the user’s mailbox via the email gateway, and when true positives are found, I collect evidence, create formal incidents, and support investigations by escalating to L2.

Experience

Work history, roles, and key accomplishments

Security Operations Associate

Groupon Shared Services

Nov 2023 - Dec 2024 (1 year 1 month)

Monitored security alerts and dashboards for abnormal activity, verified suspicious events by correlating logs and user activity, and gathered details in Google SecOps for escalation when needed. Analyzed SOC phishing mailbox reports, investigated email legitimacy via headers/attachments/URLs, and removed malicious emails from user mailboxes at the gateway.

Google SecOps Chronicle Phishing SIEM Monitoring (Exabeam)

Security Operations Associate

Sutherland Global Services

Aug 2020 - Jan 2022 (1 year 5 months)

Monitored SOC events 24/7, detected intrusion attempts, and performed initial alert validation to close false positives or escalate true positives with evidence. Conducted daily SIEM health checks and analyzed related logs to support incident investigation and resolution.

Security Monitoring SIEM Alert Triage Incident Response Log Analysis Intrusion Detection SIEM Health Checks