Manideep Vinjamuri

Detail-oriented SOC Analyst with 3+ years of experience in Security Operations, specializing in Security Information and Event Management (SIEM) monitoring, Endpoint Detection and Response (EDR), threat detection, incident response, and log analysis in a healthcare and banking sector environment handling PHI and other regulated data. Hands-on, daily experience with Microsoft Sentinel, Microsoft Defender for Endpoint, Microsoft Defender XDR, Sentinel One, Arctic Wolf MDR, and KQL (Kusto Query Language) for real-time security monitoring, alert triage, and threat investigation. Skilled in investigating malware, phishing, brute-force, and ransomware attacks end-to-end, with working knowledge of Azure IAM/Entra ID identity protection, the MITRE ATT&CK framework, the NIST Incident Response lifecycle, and ITIL-aligned service management.

Experienced acting as shift Incident SME, leading root-cause analysis on escalated incidents, tuning detection logic to reduce noise, and maintaining 24x7 SOC coverage. Comfortable operating in fast-paced, SLA-driven environments, collaborating with onshore and offshore teams, and delivering internal security training. Seeking to bring this hands-on SIEM/EDR expertise and incident-response ownership to a security-focused Cloud Security Operations or SOC Analyst role.

Associate SOC Analyst at Nations Benefits Healthcare Technologies Pvt. Ltd. (2022-11 – 2026-02)

Healthcare technology company; SOC delivers 24x7 monitoring, alert triage, and incident response for banking and healthcare sector clients handling PHI. Role combines day-to-day L1/L2 analyst duties with periodic shift Incident SME responsibilities.

• Monitor and analyze security alerts around the clock using Microsoft Sentinel and Arctic Wolf MDR, performing thorough triage and threat analysis across a 24x7 SOC.
• Investigate a wide range of security incidents, including phishing campaigns, malware infections, suspicious/anomalous logins, and network-based threats.
• Investigate malware, phishing, brute-force, and ransomware incidents end-to-end, from initial alert through containment and closure.
• Verify file hash and IP reputation and validate user/asset context using internal and external threat intelligence sources during investigations.
• Reviewed and responded to Azure identity protection alerts and MFA-related incidents, and investigate Entra ID conditional access violations.
• Create and optimize KQL (Kusto Query Language) queries in Microsoft Sentinel for threat hunting, custom detection rules, and investigation support.
• Reduce false positives by tuning analytics rules and alert thresholds, improving signal-to-noise ratio for the SOC queue.
• Map confirmed incidents to MITRE ATT&CK techniques to standardize investigation documentation and improve detection coverage.
• Monitor the health and performance of SIEM infrastructure and security sensors, and contribute to tuning correlation logic and detection use cases.
• Serve as SOC Analyst cum Shift Incident resource, playing a dual role as technical analyst and shift-level incident coordinator.
• Investigate and resolve escalated security incidents referred by L1 analysts, performing deep-dive forensic analysis, triage, and root-cause analysis (RCA) for critical and high-severity incidents.
• Act as the Incident Subject Matter Expert (SME) for the shift, overseeing all incident response activities and ensuring SLA adherence.
• Lead shift handover meetings and maintain continuity of open incidents and priorities across shifts.
• Escalate unresolved or critical issues to the SOC Manager or CDC Head as needed, following defined escalation matrices and playbooks.
• Maintain shift logs, incident metrics, and RCA documentation to support audit trails and continuous improvement.
• Isolated compromised endpoints and performed remediation actions using Microsoft Defender for Endpoint.
• Configured and monitored USB allow/block policies in Microsoft Defender for Endpoint, validated access requests, and ensured compliance with endpoint security standards.
• Prepared incident reports and escalated critical alerts to stakeholders with clear, audience-appropriate summaries.
• Managed endpoint visibility, compliance, and device health across the organization through the Absolute platform.
• Monitored secure web traffic and identified policy violations using Zscaler, reducing exposure to malicious or non-compliant sites.
• Utilized additional tools including Orca Security, Proofpoint, and N-able as part of the broader security toolset supporting endpoint, cloud, and email security.
• Worked on Azure Access Packages for user provisioning and managed role-based access to applications and resources.
• Handled access requests, approvals, and lifecycle management in line with identity governance policies.
• Identified and assessed vulnerabilities using Arctic Wolf, prioritizing findings by risk and asset criticality.
• Coordinated with cross-functional teams for remediation planning, tracking, and closure of identified vulnerabilities.
• Tracked, prioritized, and resolved security tickets efficiently via Zendesk, meeting SLA targets for response and resolution.
• Escalated critical incidents and collaborated with internal security teams for coordinated response and remediation efforts.
• Collaborated effectively with onshore and offshore teams across time zones, supporting project coordination on security initiatives.
• Delivered IT and security awareness training sessions when required, and contributed to skill development plans for junior analysts.
• Reviewed and refined incident response procedures, SOPs, playbooks, and runbooks to improve SOC efficiency and consistency.

Bachelor's Degree in Engineering – GIET College of Engineering College (2021)