Abin K Binoy

SOC Analyst with 2.4+ years of experience in incident triage, classification, and escalation within a 24/7 Security Operations Center. Skilled in monitoring and investigating security alerts across SIEM, EDR, and threat intelligence platforms, performing log analysis for endpoint, network, and cloud environments, and documenting incident details, actions, and resolution steps for continuity and reporting. Well-versed in the MITRE ATT&CK framework, threat hunting fundamentals, and containment/mitigation of security threats.

CEH certified, with proven experience mentoring junior analysts as Shift Lead. Comfortable working 24x7 rotational shifts, including night shifts, with a strong track record of improving detection coverage and incident response efficiency.

SOC Analyst L2 at Positka Pvt. Ltd. (2024-05 – Present)

• Performed initial triage and classification of a high volume of security alerts daily using SIEM tools (Splunk and NG-SIEM), escalating confirmed incidents per defined SLAs within a 24/7 SOC environment.
• Investigated phishing campaigns, malware infections, brute-force attacks, and insider threat indicators; achieved a significant reduction in false-positive escalation rate through custom SIEM correlation rule tuning.
• Assisted in the containment and mitigation of security threats using CrowdStrike Falcon EDR - isolating compromised endpoints, collecting threat artifacts, and initiating remediation workflows.
• Performed in-depth log analysis across Windows Event Logs, firewall logs, proxy logs, and DNS logs to identify suspicious activity, anomalous behaviour, and lateral movement patterns.
• Utilized threat intelligence feeds and tools (VirusTotal, AbuseIPDB) to enhance detection capabilities and enrich alert context for faster decision-making.
• Documented incident details, actions taken, and resolution steps in the incident management system, and maintained investigation playbooks and shift handover documentation for continuity across rotations.
• Participated in post-incident reviews with L2 analysts, providing timeline analysis and IOC enrichment to identify gaps and improvements in SOC processes.
• Contributed to developing multiple new Splunk and NG-SIEM correlation rules aligned with MITRE ATT&CK techniques, improving detection coverage for ransomware, credential stuffing, and data exfiltration.
• Proactively monitored the health of security tools, identifying ingestion failures and platform issues, and coordinated with vendor teams to ensure continuous data flow into the SIEM.
• Served as Shift Lead - overseeing L1 and trainee analysts, allocating alert queues, conducting shift briefings, and acting as the primary point of contact for account and client managers; fully comfortable with 24x7 rotational shift models including night shifts.

Android Developer (Flutter) at UI Smartech (2023-12 – 2024-04)

• Developed cross-platform mobile applications using Flutter and Dart for Android and iOS platforms.
• Built and deployed kiosk-mode applications tailored for business use cases in retail and service environments.
• Engaged with business owners and organisations to understand product requirements and support the sales process.

B.E. in Computer Science & Engineering – Anna University — Dhanalakshmi Srinivasan College of Engineering, Coimbatore (2023-08)