Kushal Mahajanshettar
Bengaluru
Summary
SOC-focused Security Analyst with 2 years of experience in real-time security alert monitoring, investigation, and attack mitigation using Splunk and IBM QRadar. Proficient in analyzing web-application, endpoint, and email-based threats, with strong understanding of SOC workflows, escalation processes, and incident response lifecycle. Seeking a role that enables contribution to security operations through precise investigation, rapid analysis, and continuous improvement, supporting customers in identifying attacks and implementing effective countermeasures.
Overview
4
4
years of professional experience
Work History
Security Analyst
Ascendion (Client : Flip-kart)
Bengaluru
09.2024 - Current
- Monitor and analyze endpoint security alerts in real-time.
- Investigate suspicious endpoint activity and respond to incidents.
- Continuous monitoring and data collection.
- Quarantine, block, or release suspicious emails as needed.
- Educate users on email security best practices.
SOC Analyst
Euclid Innovations
Bengaluru
11.2021 - 11.2022
- Responding to the incidents and gathering additional information to resolve the issue or escalate the issue to the appropriate teams.
- Analyze security event data from the network (IDS, IPS, FIREWALL, and SIEM).
- Using of security information event management (SIEM – IBM QRADAR, SPLUNK ENTERPRISE SECURITY) tool to document security breaches and responses daily.
- Perform Security SIEM Operational task - Analysis, filters, Reports. Identifying the false positive and working with appropriate team member for tuning of alerts.
- Investigating on the reputation of IP addresses suspicious URL’s, files and hash files with the help of VIRUSTOTAL, Symantec Site review.
- Ensure the integrity and protection of networks, systems and applications by technical organization security policies, through monitoring of vulnerability scanning device.
- Analysis of Email based threats: Email header analysis and Spam/Phishing emails using EMAIL GATEWAY, MX Toolbox.
- Preparing incident report of the previous shift and submitting to team lead.
- Monitoring Indicator of compromise (IOC). Updating myself with latest security news.
- Escalating issues to level1 and management when necessary. Generating and Making Daily, Weekly and Monthly reports and charts. Knowledge on architecture and components of SPLUNK ENTERPRISE SECURITY, IBM QRADAR, RSA Netwitnes.
- Good understanding on various alerts and attacks such as XSS, SQL injection, Phishing, spoofing, Sniffing, Brute force, DOS, DDOS ARP Spoofing, etc.
- Good understanding on various malwares such as Virus, Worm, Trojan Horse, Ransom ware, Rootkit, Phishing, adware, scare ware etc. Follow all process, Standard operating procedures and instructions so that work is carried out in a controlled and consistent manner.
Education
MBA - Finance & HR
KLE Technological University
Hubli07-2016
Skills
- SIEM - Splunk, IBM QRadar
- Email - Email Gateway, MX Toolbox
- Other - VirusTotal, Symantec Site Review
Timeline
Security Analyst
Ascendion (Client : Flip-kart)
09.2024 - Current
SOC Analyst
Euclid Innovations
11.2021 - 11.2022
MBA - Finance & HR
KLE Technological University