Satyam Kumar

I’m a SOC Analyst with hands-on experience in SIEM monitoring, incident response, and threat detection using Wazuh, Splunk, and ZeroHack. I’ve handled 30+ security incidents, including phishing and brute-force attacks, while keeping clear, evidence-based case records in OpenProject. I’m especially strong in log analysis, alert triage, and threat hunting.

In my current role, I classify alerts as true positive/false positive/benign with documented evidence, and I’ve driven a proven 20% reduction in false positives through detection rule tuning. I also tune Suricata IDS/IPS rules to improve detection accuracy. My workflow covers investigation and containment/recovery, including email header analysis, URL tracing, account compromise checks, and log correlation.

I apply MITRE ATT&CK concepts in SOC operations and focus on uncovering anomalous user activity and lateral movement. I build detection engineering confidence through SIEM lab projects (Wazuh + Suricata + Splunk stacks), where I simulate attacks like brute-force, suspicious PowerShell execution, privilege escalation, impossible travel, and log deletion, then validate alerts across endpoints and network logs. I bring a continuous-improvement mindset—turning findings into better signals, clearer dashboards, and stronger response readiness.