Dilip Joshi

Results-driven SOC Analyst with 6 years of progressive experience in Security Operations, Threat Detection, and Incident Response across enterprise environments. Proven expertise in SIEM platforms (IBM QRadar, Splunk, Azure Sentinel, CrowdStrike) with a track record of reducing alert response times, fine-tuning detection rules to minimize false positives, and collaborating cross-functionally to strengthen organizational security posture.

Holds

CompTIA Security+ SY0-701 certification and brings hands-on experience across L1/L2 SOC operations, malware triage, phishing analysis, and compliance-driven reporting.

SOC Analyst – L1/L2 (QRadar, CrowdStrike, Splunk, Azure Sentinel) at IBM India (2023-08 – 2026-07)

• Monitored and triaged 100+ security alerts daily across QRadar, CrowdStrike, Splunk, and Azure Sentinel, reducing mean time to respond (MTTR) by proactively escalating high-severity incidents.
• Developed and maintained standard operating procedures (SOPs) for 20+ alert types, reducing analyst onboarding time by improving documentation quality.
• Served as L2 escalation point for complex alerts, collaborating directly with the Incident Response team to contain and remediate threats efficiently.
• Provided 24x7 on-call support for P1/P2 incidents, ensuring SLA adherence and timely stakeholder communication.
• Managed ticket queues using internal ITSM platforms, consistently maintaining queue within SLA thresholds.
• Liaised with partner teams and end-users to investigate, resolve, and document security events end-to-end.
• Knowledge of MITRE ATT&CK framework and experience mapping security detections and incidents to ATT&CK tactics and techniques a plus.

Splunk Administrator / SOC Analyst at IBM India (2021-08 – 2021-08)

• Administered Splunk SIEM including user role management, search optimization, and health monitoring in a 24x7 SOC environment.
• Optimized Splunk search queries resulting in improved performance and reduced query execution times.
• Investigated Azure and AWS server alerts, restarting services to ensure platform availability and minimize downtime.
• Analysed feed throughput anomalies and feed-down issues, escalating with root cause documentation.
• Authored daily/weekly/monthly dashboards and executive-level reports distributed to key stakeholders.
• Ensured information security policy compliance across client environments; maintained deployment change logs and banners.

Security Analyst (L1/L2 SOC) at IT Source Technologies (2019-11 – 2021-04)

• Monitored SIEM alerts continuously, identifying and escalating real security incidents from high-volume false positive environments through systematic fine-tuning.
• Conducted malware analysis triage and email phishing investigations, reducing phishing incident dwell time.
• Managed and configured security monitoring tools; built custom dashboards tailored to client requirements.
• Prioritized alerts by severity and executed containment, remediation, and recovery strategies aligned with incident response playbooks.
• Maintained and updated SOC knowledge base with new incident types, runbooks, and resolution templates.
• Produced daily status reports and delivered analysis of security log data from hundreds of devices to SOC leadership.

Security Engineer at Connectivity IT Solutions (2018-10 – 2019-10)

• Managed virus protection systems and responded to virus reports; identified threats using Symantec Antivirus and escalated security incidents to appropriate teams.
• Validated system security requirements and analysed security designs to ensure infrastructure hardening.
• Provided escalation support for complex network and security faults during and outside business hours.
• Executed network change management for integration of new technologies with minimal service disruption.
• Created daily status reports and maintained SOC knowledge base with updated incident documentation.

Network Security Engineer at STI Infotech (2016-07 – 2017-08)

• Developed and maintained information security standards, procedures, and guidelines aligned with leading industry frameworks.
• Performed risk and vulnerability assessments and presented findings and mitigation recommendations to senior management.
• Advised senior leadership on emerging privacy and security trends, contributing to strategic risk mitigation planning.
• Delivered a network system upgrade project on time and under budget with zero unplanned service interruptions.

Master of Computer Applications in Network Security, Database Management, Software Engineering – Madurai Kamraj University (2013-06 – 2015-05)