Open to opportunities

VijayM User

@vijaymuser

SOC Analyst with 4+ years triaging SIEM alerts, investigating phishing/malware, and strengthening detections across enterprise and banking environments.

India

Message

What I'm looking for

I’m targeting a SOC Analyst L1/L2 role in a structured security operations environment—focused on playbook-driven alert triage, incident investigation, identity/email/cloud monitoring, and continuous improvement of detection quality with SLA compliance.

I’m a SOC Analyst with 4+ years of experience in security alert monitoring, incident detection and response, and SIEM-based log analysis across enterprise and banking environments. I focus on fast, accurate triage and escalation—backed by playbooks and consistent SLA adherence.

In my current role, I monitor and triage 1,000–1,200+ security alerts per month across Splunk and Microsoft Sentinel. I investigate phishing, malware, brute-force, account compromise, and privilege escalation incidents, correlating logs across endpoints, email, and cloud to confirm true positives and rule out false alerts.

I enrich IOCs using VirusTotal, AbuseIPDB, and URLScan, and map incidents to the MITRE ATT&CK framework. I also support email threat investigations with Proofpoint and Trend Micro, performing email header analysis and URL/attachment inspection to determine phishing disposition.

I’m committed to measurable improvements in SOC performance—reducing false positives through SIEM correlation rule review, and improving MTTR by refining runbooks and playbooks after incidents. With a background that includes banking SOC operations, identity monitoring (Microsoft Entra ID/Azure AD), and service-ticket workflows, I’m targeting a structured SOC Analyst L1/L2 environment to deliver reliable detection and response.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst L1

Current

Montcrest Software Pvt. Ltd.

Jul 2024 - Present (2 years)

Monitors and triages 1,000–1,200+ security alerts per month across Splunk and Microsoft Sentinel, classifying events and escalating confirmed incidents per playbooks with SLA adherence. Investigates phishing and malware, enriches IOCs, maps incidents to MITRE ATT&CK, and supports identity-related alert investigation in Microsoft Entra ID (Azure AD).

Splunk Enterprise Triage Phishing AbuseIPDB Urlscan Root Cause Analysis Microsoft Entra ID ProofPoint Email Header Analysis URL Analysis MFA Conditional Access RBAC Playbooks ServiceNow Jira SLA Management

SOC Analyst - Security Ops

TechnoGrowth Software Solutions Pvt. Ltd.

Oct 2023 - Jul 2024 (9 months)

Monitored security alerts in a banking SOC environment by triaging daily alerts from SIEM and FortiGate firewall logs to identify malicious activity and anomalous network behavior. Investigated phishing, brute-force, and account compromise incidents, handled Microsoft Entra ID suspicious sign-ins, integrated threat intelligence into SIEM detections, and supported endpoint monitoring with Trend Mic

SIEM FortiGate Firewall Log Monitoring Phishing Microsoft Entra ID Impossible Travel Alert Threat Intelligence Domain Denylisting Malware Hash Analysis

SOC Analyst — Security Operations

TechnoGrowth Software Solutions Pvt. Ltd.

Oct 2023 - Jul 2024 (9 months)

Monitored security alerts in a banking SOC environment, triaging SIEM and FortiGate firewall logs to identify malicious activity and policy violations. Conducted end-to-end investigations for phishing, brute-force, and account compromise incidents, including identity monitoring via Microsoft Entra ID, and integrated threat intelligence feeds into SIEM detection rules.

SIEM FortiGate Firewall Log Monitoring Phishing Impossible Travel Detection Malware Hash Analysis Compliance Documentation RBI Banking SOC Documentation

Desktop Support Engineer L1

FSP Solutions Pvt. Ltd.

Jan 2023 - Oct 2023 (9 months)

Managed Active Directory user provisioning and RBAC assignments for 2,000+ enterprise endpoints and handled high-priority incident escalations with security and infrastructure teams. Supported onboarding/offboarding compliance policies and coordinated enforcement of access controls.

Group Windows Active Directory User Provisioning RBAC Incident Escalation Access Control

Security Intern - Log Monitoring

Logipool Infotech

Aug 2022 - Dec 2022 (4 months)

Reviewed Linux server logs daily, escalated anomalies to senior security staff, and applied CIS benchmark controls to harden development and staging environments. Supported systems and log monitoring activities for security monitoring.

Linux System Logs Anomaly Detection Log Analysis Security Monitoring Anomaly Escalation CIS Benchmarks Hardening