Naveen Thadem

Information Security Analyst with 3.5+ years of overall IT experience, including nearly 2 years of experience in Information Security (SOC Operations) and prior experience as a Process Executive. Experienced in monitoring security alerts, investigating incidents, log analysis, endpoint security, email security, and user account management. Familiar with SIEM monitoring, incident response, vulnerability management, and security best practices.

A quick learner with good analytical, troubleshooting, and communication skills, committed to maintaining organizational security and ensuring timely incident resolution

Information Security analyst - TCL - Mumbai

(2024-11)

• Monitored security alerts and events across enterprise environments using SIEM and security monitoring tools to identify potential threats and operational issues.
• Performed alert triage and initial investigation, analyzing the severity and business impact before taking appropriate action or escalating to relevant teams.
• Created, tracked, and managed incident and service request tickets using ServiceNow, ensuring timely resolution within defined SLAs.
• Monitored payment security operations and ensured security jobs were executed successfully, investigating failures and coordinating recovery activities.
• Performed daily health checks on critical security services, applications, and infrastructure to ensure uninterrupted security operations.
• Monitored and validated scheduled security jobs running on Linux servers and Kubernetes environments, troubleshooting failed executions when required.
• Worked closely with firewall administration teams to create, modify, and validate firewall rule requests based on business and security requirements.
• Verified firewall changes after implementation to ensure connectivity while maintaining organizational security standards.
• Analyzed system, application, and security logs from Linux servers to identify anomalies, failures, and suspicious activities.
• Supported Kubernetes-based applications by monitoring pod status, container health, deployments, and service availability from an operational security perspective.
• Coordinated with infrastructure, network, cloud, and application support teams to resolve production security incidents and operational issues.
• Performed incident validation and root cause analysis (RCA) for recurring operational and security issues.
• Followed standard operating procedures (SOPs), runbooks, and incident response playbooks while handling production incidents.
• Managed high-priority (P1/P2) incidents, ensuring timely communication with stakeholders until resolution.
• Maintained detailed documentation of incidents, troubleshooting steps, resolutions, and knowledge articles for future reference.
• Monitored security dashboards and generated daily operational reports highlighting incident trends and system health.
• Participated in shift handovers, ensuring proper knowledge transfer of ongoing incidents and pending activities.
• Worked in a 24×7 production support environment, providing continuous monitoring and operational support.
• Collaborated with cross-functional teams to improve operational efficiency and minimize recurring incidents.
• Performed basic threat validation by analyzing suspicious IP addresses, domains, URLs, and file hashes using threat intelligence platforms.
• Assisted in SIEM alert analysis and event correlation to distinguish genuine security incidents from false positives.
• Supported vulnerability remediation activities by coordinating with system owners and validating implemented fixes.
• Contributed to continuous improvement initiatives by identifying opportunities to automate repetitive operational tasks and enhance monitoring processes.

Process Executive - Lead IT pvt Ltd

(2023-04 - 2024-11)

• Monitored and analyzed security events through SIEM platforms to detect and respond to potential cybersecurity threats.
• Performed alert triage by investigating security events, validating alerts, and prioritizing incidents based on severity and business impact.
• Investigated security incidents involving malware, phishing, brute-force attacks, suspicious logins, privilege misuse, and unauthorized access attempts.
• Correlated security events from multiple log sources to identify Indicators of Compromise (IOCs) and potential attack patterns.
• Managed the complete incident lifecycle, including detection, investigation, escalation, documentation, and closure.
• Created, updated, and tracked security incidents using ServiceNow, ensuring compliance with SLAs and incident handling procedures.
• Monitored and analyzed logs from Windows systems, Active Directory, firewalls, VPNs, web proxies, and endpoint security solutions.
• Investigated endpoint detection and antivirus alerts to identify malicious activity and recommend appropriate remediation.
• Performed log analysis to determine the scope, impact, and root cause of security incidents.
• Validated suspicious IP addresses, domains, URLs, and file hashes using threat intelligence platforms and open-source intelligence (OSINT).
• Escalated high-severity incidents to L2/L3 SOC teams with comprehensive investigation details and supporting evidence.
• Conducted user account activity reviews to identify anomalous authentication attempts and potential account compromise.
• Assisted in threat hunting activities by proactively searching for suspicious behaviors and abnormal patterns within the environment.
• Supported vulnerability management by tracking remediation activities for critical security findings.
• Documented incident findings, timelines, root cause analysis, and recommended corrective actions for future reference.
• Participated in shift handovers to ensure seamless monitoring and continuity of security operations.
• Collaborated with infrastructure, network, and application teams to support incident investigation and resolution.
• Followed incident response playbooks, security policies, and standard operating procedures during security investigations.

BTech - Anurag college of engineering (2022)