Surya Shantan

At Unlox | Coratia Technologies, I performed SIEM monitoring, log analysis, and alert triage using Splunk Enterprise. I supported L1 SOC operations by documenting investigation findings and routing incident alerts.

I investigated SSH brute-force attempts by analyzing authentication logs and identifying attacker IP addresses. In Splunk Enterprise projects, I correlated failed and successful login events and reconstructed suspicious activity from log timestamps.

I built an AI-powered SOC workflow using n8n, OpenAI, webhooks, Trello, Gmail, and JavaScript to automate repetitive initial alert-handling tasks. It evaluated simulated alerts, created incident records, and sent security notifications.