Kavitha Elumalai

Cybersecurity professional with 3 years 3 months of experience in Security Operations Center (SOC) environments, specializing in threat detection, incident investigation, security monitoring, and advanced alert analysis. Currently working as a SOC Analyst Level 2, handling complex security alerts, performing in-depth investigation, and supporting incident response activities across enterprise environments. Experienced in SIEM monitoring, endpoint security investigation, phishing analysis, cloud security alert monitoring, and threat intelligence analysis.

Proficient in working with security platforms such as Splunk, Microsoft Sentinel, CrowdStrike, Microsoft Defender, Tanium, and Proofpoint to detect and investigate potential cyber threats. Skilled in analyzing security logs, authentication events, phishing attacks, malware alerts, suspicious network activity, and cloud security incidents across Azure and AWS environments. Adept at correlating security events across multiple sources to identify Indicators of Compromise (IOCs), attack patterns, and adversary techniques aligned with MITRE ATT&CK framework.

Demonstrated ability to triage high-volume alerts, reduce false positives, perform threat hunting, and document security incidents clearly for escalation and remediation. Strong understanding of incident response lifecycle, security investigation methodologies, and enterprise security monitoring operations. Committed to continuously enhancing cybersecurity knowledge in areas including threat hunting, cloud security monitoring, advanced SIEM analytics, and cyber threat intelligence.

SOC Analyst - Level 2 - Wipro Technologies

(2023-01)

Working as a Level 2 Security Operations Center Analyst responsible for advanced alert investigation, security monitoring, and incident escalation within enterprise security environments

• Monitor and analyze security alerts generated from SIEM platforms to identify potential cyber threats and suspicious activities.
• Perform deep investigation of alerts triggered across multiple security tools including SIEM, endpoint security platforms, and email security systems.
• Validate alerts to determine whether they represent true security incidents or false positives.
• Endpoint Threat Investigation
• Phishing & Email Threat Investigation
• Cloud Security Monitoring
• Threat Intelligence & IOC Investigation
• SOC Operational Improvements
• Threat Hunting
• MITRE ATT&CK TECHNIQUES INVESTIGATION
• Successfully investigated and resolved numerous high-priority security alerts across enterprise security environments.
• Improved alert investigation efficiency by identifying patterns in recurring false positive alerts.
• Strengthened phishing detection accuracy through detailed email investigation and analysis.
• Maintained high-quality incident documentation to support internal audits and security compliance requirements.
• Demonstrated strong performance in a 24x7 SOC monitoring environment handling large volumes of security alerts.

Bachelor of Technology (B.Tech) - Electronics and Communication Engineering - Sri Manakula Vinayagar Engineering College (2022-12)