ROHAN BHALERAO

SOC Analyst

AARNA Technologies Pvt. Ltd.

07.2023 - Current

Conducted proactive monitoring and efficient triage of security events, differentiating between false positives and legitimate incidents.
Investigated security alerts using log files, security tools, and correlation rules to identify intrusion attempts and compromises.
Analyzed and monitored logs from multiple sources (firewall, proxy, IDS/IPS, endpoints, WAF, email, anti-malware) to ensure situational awareness.
Managed the complete incident response lifecycle: detection, containment, eradication, recovery, and reporting.
Investigated suspicious emails, performed threat classification, and communicated findings and recommendations to users.
Collected and analyzed threat intelligence feeds and IOCs to enrich investigations and improve detection capabilities.
Identified, ingested, and managed IOCs in applicable security controls; collaborated with vendors/internal teams to improve detection coverage.
Developed and fine-tuned SIEM correlation rules and detection use cases to reduce false positives and identify emerging threats.
Updated and maintained incident response playbooks to ensure operational readiness for various attack scenarios.
Performed routine health checks and maintenance of SOC infrastructure including SIEM, EDR, and SOAR tools.
Delivered executive-level SOC reports on security posture, recent threats, response effectiveness, and ongoing risk trends.
Collaborated with IT, network, and infrastructure teams to resolve incidents and enforce security controls.
Stayed current with the latest threats, MITRE ATT&CK techniques, and cybersecurity best practices to continuously enhance SOC operations.
Created comprehensive incident documentation including root cause analysis, lessons learned, and remediation steps.