Chandra K
SOC Analyst
Talent
HyderabadMember since April 26, 2026
IBM QRadarSplunkSPLMicrosoft SentinelElastic SIEMArcSightSigma RulesAQLCrowdStrike FalconMS Defender for EndpointSysmonProcess Tree AnalysisHost ContainmentAWS CloudTrailAzure ADEntra IDCASBO365 SecurityPrivileged Access MonitoringPythonPowerShellBashKQLZscalerDLPRapid7 NexposeWiresharkAlert TriageRCAPlaybook DevelopmentMITRE ATT&CKIOC/TTP CorrelationSTIX/TAXIIC2 DetectionNIST CSFCIS ControlsISO/IEC 20000:2018OWASP Top 10ServiceNowJiraIBM ResilientSOAR Workflow Integration
·
Hire this person
Send a job offer directly to this candidate
IBM QRadarSplunkSPLMicrosoft SentinelElastic SIEM
About
SOC Analyst L2 at TCS (4 years; promoted from L1 in 18 months) with deep expertise in IBM QRadar, Splunk, CrowdStrike Falcon, Zscaler, CASB, and Rapid7 Nexpose. Reduced MTTR by 40% across a 24×7 global SOC; authored 20+ MITRE ATT&CK-mapped detection use cases. SC-200 & CEH certified.
Targeting Detection
Engineering or Senior L1/L2 role.
Experience
SOC Analyst — L2 (Promoted from L1, Nov 2023) at Tata Consultancy Services (2022-05 – Present)
24×7 global SOC for financial & enterprise clients. Incident Detection & Response, SIEM Engineering & Threat Hunting, Cloud, Automation & Vulnerability Management.
- Triaged 100+ alerts/week (500+ incidents) in QRadar; cut MTTR 40% via playbook enforcement and severity workflows.
- Owned L2 escalation queue for ransomware, lateral movement (Pass-the-Hash, PsExec), and ATO incidents within SLA.
- Investigated endpoint compromises via CrowdStrike Falcon & Sysmon: host isolation, process-tree analysis, memory artifact review, and eradication sign-off.
- Delivered audit-ready post-incident reports with kill-chain timelines to C-suite and client stakeholders.
- Authored 20+ QRadar & Splunk use cases (T1059, T1078, T1003, T1566); cut false-positives 30%; built WAF, proxy, and CloudTrail parsers with zero ingestion gaps.
- Ran bi-weekly ATT&CK-hypothesis hunts; uncovered 5+ undetected persistence TTPs (scheduled tasks, WMI subscriptions, registry run keys).
- Detected insider-threat SharePoint exfiltration via CASB & Azure AD; blocked active C2 beaconing using STIX/TAXII and VirusTotal correlation.
- Enforced web-traffic policies via Zscaler ZIA; reviewed logs for policy violations, data exfiltration, and shadow-IT activity.
- Monitored AWS CloudTrail & Azure AD for privilege escalation and suspicious role assumption across multi-tenant environments.
- Scripted Python/PowerShell IOC-lookup automations saving ∼15 min/alert on high-frequency offense types.
- Triaged Rapid7 Nexpose findings; drove critical-CVE remediation for internet-facing assets, reducing attack surface exposure.
Education
B.Tech in Mechanical Engineering – Avanthi's St. Theressa Institute of Engineering & Technology, JNTU (2018 – 2021)
Skills
SOC Analyst
