Mushahid M

Cybersecurity professional with hands-on SOC L1 experience in SIEM monitoring, alert triage, threat intelligence, and incident investigation using Splunk, Splunk Cloud, and Wazuh (EDR/XDR). Skilled in log analysis across Windows and Linux systems, network protocol auditing, and email phishing investigation. Experienced creating and tuning custom detection rules, applying MITRE ATT&CK and Cyber Kill Chain frameworks, and correlating IOCs across multiple threat intelligence sources (VirusTotal, AlienVault OTX).

Practical and self-studied understanding of firewalls, IDS/IPS, VPN, Kerberos, LDAP, and Active Directory authentication, with exposure to SOAR automation for alert enrichment and incident response. Proficient in root cause analysis (RCA) and packet-level traffic analysis (Wireshark). Strong documentation and communication skills with a proven ability to identify and investigate security threats end-to-end.

Cyber Security Intern - Centre for Development of Advanced Computing (C-DAC) - Electronic City Phase 1, Bengaluru

(2026-02 - 2026-07)

L1 — Monitoring, Triage & Response and L2-Adjacent — Detection Engineering & Deeper Investigation

• Monitored and analyzed security events using SIEM platforms (Splunk, Splunk Cloud) and Wazuh (EDR/XDR), performing alert triage and investigating suspicious security activities.
• Conducted log analysis from Windows OS, Linux OS, and firewall sources, applying conceptual knowledge of firewalls, IDS/IPS, and VPN technologies to identify anomalies.
• Audited core network protocols (DNS, HTTP/HTTPS, DHCP, SSH, FTP) to identify unauthorized communication tunnels and potential intrusion attempts.
• Performed email phishing analysis by examining suspicious emails, identifying malicious URLs, attachments, spoofed domains, and email headers.
• Utilized threat intelligence platforms (VirusTotal, AlienVault OTX) to analyze malicious network indicators, IP reputations, and C2 domains, validating IOCs through URL reputation services.
• Generated incident reports and maintained security documentation to support handoff and knowledge sharing.
• Created and tuned custom Wazuh detection rules based on observed brute-force, PowerShell execution, and privilege escalation patterns, reducing false-positive noise.
• Analyzed authentication and directory service logs applying Active Directory, Kerberos, and LDAP concepts, correlating identity-related indicators across multiple log sources.
• Applied MITRE ATT&CK and Cyber Kill Chain frameworks to map observed adversary behavior to known tactics and techniques during incident investigation exercises.
• Assisted in SOAR automation workflows for alert enrichment and incident response, contributing to playbook-driven investigation consistency.
• Conducted network traffic analysis using Wireshark for packet-level investigation beyond standard log-based triage.
• Performed root cause analysis (RCA) for system anomalies, applying the CIA Triad to systems architecture and enterprise data defense.

B.E - Information Science and Engineering - BMS Institute of Technology and Management (2022-12 - 2025-06)

Diploma - Computer Science and Engineering - Govt Polytechnic Chitradurga (2019-07 - 2022-10)