Charan Reddy

SOC / Security Analyst with hands-on experience in security monitoring, SIEM and EDR alert triage, endpoint security investigation, incident response support, malware and phishing analysis, vulnerability assessment, and security-event correlation. Experienced with Wazuh, Microsoft Sentinel, Splunk, OpenSearch, and SentinelOne, with practical exposure to Windows 10/11 security, Windows Event Logs, Active Directory, Group Policy, Windows Defender, Windows Firewall, Sysmon, PowerShell logging, TCP/IP, DNS, HTTP/HTTPS, VPN, firewall and IDS/IPS concepts. Skilled in MITRE ATT&CK, threat hunting, IOC/IOA analysis, patching and endpoint-hardening concepts, incident documentation, and Python/Bash security automation.

SOC Analyst L1 - SafeSpace

(2026-06)

• Perform 24x7 real-time security monitoring and SIEM alert triage using Wazuh, Microsoft Sentinel, and Splunk; classify, prioritize, investigate, and escalate security events.
• Investigate endpoint security alerts using SentinelOne EDR and correlate endpoint, Windows, firewall, IDS/IPS, proxy, and network telemetry to identify suspicious activity and potential unauthorized access.
• Analyze IOCs/IOAs including malicious IPs, domains, hashes, URLs, and behavioral indicators; enrich alerts with threat intelligence and map relevant activity to MITRE ATT&CK.
• Investigate phishing emails, suspicious URLs and attachments, and malware indicators; perform email-header/artifact analysis, distinguish false positives, and document findings.
• Analyze Windows and Linux security logs and suspicious network activity; use TCP/IP, DNS, HTTP/HTTPS, firewall, IDS/IPS, Wireshark, and Zeek data to support incident scoping.
• Follow incident-response SOPs/playbooks, document incident history, actions, severity, status, and escalation details in ServiceNow/Jira, and support containment and recovery workflows.
• Support detection-rule tuning, security automation, and repeatable SOC procedures to improve alert quality and response consistency.

Ethical Hacking & SOC Intern - InLighnX Global Pvt. Ltd.

(2025-07 - 2026-01)

• Monitored and triaged SIEM alerts using Wazuh and Splunk, analyzed security logs, investigated suspicious activity, and escalated findings according to SOC procedures.
• Performed vulnerability scanning and network reconnaissance; identified 15+ vulnerabilities, documented severity and remediation recommendations, and supported security hardening activities.
• Analyzed Linux logs and simulated Windows security events and applied MITRE ATT&CK and OWASP Top 10 concepts during security investigations and testing.
• Developed Python and Bash scripts for log parsing, alert correlation, IOC extraction, and automated security reporting.

Bachelor of Technology - Cyber Security - Kalasalingam Academy of Research and Education (2025)