Skip to main content
Chandra K

Chandra K

SOC Analyst

Talent
HyderabadMember since April 26, 2026
IBM QRadarSplunkSPLMicrosoft SentinelElastic SIEMArcSightSigma RulesAQLCrowdStrike FalconMS Defender for EndpointSysmonProcess Tree AnalysisHost ContainmentAWS CloudTrailAzure ADEntra IDCASBO365 SecurityPrivileged Access MonitoringPythonPowerShellBashKQLZscalerDLPRapid7 NexposeWiresharkAlert TriageRCAPlaybook DevelopmentMITRE ATT&CKIOC/TTP CorrelationSTIX/TAXIIC2 DetectionNIST CSFCIS ControlsISO/IEC 20000:2018OWASP Top 10ServiceNowJiraIBM ResilientSOAR Workflow Integration
·

Hire this person

Send a job offer directly to this candidate

IBM QRadarSplunkSPLMicrosoft SentinelElastic SIEM

About

SOC Analyst L2 at TCS (4 years; promoted from L1 in 18 months) with deep expertise in IBM QRadar, Splunk, CrowdStrike Falcon, Zscaler, CASB, and Rapid7 Nexpose. Reduced MTTR by 40% across a 24×7 global SOC; authored 20+ MITRE ATT&CK-mapped detection use cases. SC-200 & CEH certified.

Targeting Detection

Engineering or Senior L1/L2 role.

Experience

SOC Analyst — L2 (Promoted from L1, Nov 2023) at Tata Consultancy Services (2022-05 – Present)

24×7 global SOC for financial & enterprise clients. Incident Detection & Response, SIEM Engineering & Threat Hunting, Cloud, Automation & Vulnerability Management.

  • Triaged 100+ alerts/week (500+ incidents) in QRadar; cut MTTR 40% via playbook enforcement and severity workflows.
  • Owned L2 escalation queue for ransomware, lateral movement (Pass-the-Hash, PsExec), and ATO incidents within SLA.
  • Investigated endpoint compromises via CrowdStrike Falcon & Sysmon: host isolation, process-tree analysis, memory artifact review, and eradication sign-off.
  • Delivered audit-ready post-incident reports with kill-chain timelines to C-suite and client stakeholders.
  • Authored 20+ QRadar & Splunk use cases (T1059, T1078, T1003, T1566); cut false-positives 30%; built WAF, proxy, and CloudTrail parsers with zero ingestion gaps.
  • Ran bi-weekly ATT&CK-hypothesis hunts; uncovered 5+ undetected persistence TTPs (scheduled tasks, WMI subscriptions, registry run keys).
  • Detected insider-threat SharePoint exfiltration via CASB & Azure AD; blocked active C2 beaconing using STIX/TAXII and VirusTotal correlation.
  • Enforced web-traffic policies via Zscaler ZIA; reviewed logs for policy violations, data exfiltration, and shadow-IT activity.
  • Monitored AWS CloudTrail & Azure AD for privilege escalation and suspicious role assumption across multi-tenant environments.
  • Scripted Python/PowerShell IOC-lookup automations saving ∼15 min/alert on high-frequency offense types.
  • Triaged Rapid7 Nexpose findings; drove critical-CVE remediation for internet-facing assets, reducing attack surface exposure.

Education

B.Tech in Mechanical Engineering – Avanthi's St. Theressa Institute of Engineering & Technology, JNTU (2018 – 2021)

Skills

SOC Analyst

Reviews

Related