Sanjeev Kumar

I’m an L1 SOC Analyst with hands-on experience in SIEM-based alert triage, log analysis & correlation, and end-to-end incident management across Windows and Linux environments. I investigate brute-force, C2 beacon, phishing, and DNS tunnelling events, document findings with formal incident reports and IOC documentation, and map detections to MITRE ATT&CK and the Cyber Kill Chain.

I work across tools and workflows including Splunk and Microsoft Sentinel (SPL/KQL), Wireshark, and Snort IDS, using techniques like TCP/IP, DNS, and protocol analysis to support threat investigations. In my Cyber Security Intern role, I monitored and triaged 15+ SIEM alerts per week and led bug bounty triage (35+ reports), while in VAPT Intern work I identified 25+ vulnerabilities across web apps, APIs, and network infrastructure.