Niketan Gosavi

Entry-level SOC Analyst with hands-on, lab-validated experience in alert triage, log correlation, incident investigation, and MITRE ATT&CK-based threat hunting. Closed 100+ SOC Simulator alerts across TryHackMe and Hack The Box's LetsDefend platform with a 92% true-positive rate, including EDR investigations (SentinelOne) and a hands-on quishing (QR-code phishing) incident response case. Ranked top ~4% globally on TryHackMe with 120+ rooms completed.

Comfortable with Windows/Linux security fundamentals, SIEM/EDR concepts, Splunk, Wireshark, and Nmap. Seeking a SOC Analyst L1 role in monitoring, triage, investigation, and escalation.

SOC Analyst (Lab-based) - TryHackMe & Hack The Box LetsDefend

Hands-on SOC and security operations experience through simulated environments

• Investigated simulated SOC alerts end-to-end — alert review, evidence collection, log correlation, TP/FP determination, severity assessment, escalation, and documentation.
• Closed 100+ alerts across TryHackMe and LetsDefend SOC Simulators with a 92% true-positive rate, covering suspicious PowerShell activity, host events, and network indicators.
• Ran EDR-based investigations in LetsDefend labs using SentinelOne, and Splunk including host containment actions and IOC-based hash searching.
• Completed a hands-on quishing (QR-code phishing) incident response case, triaging and documenting the incident through a structured SOC ticketing workflow.
• Analyzed Windows security events and Sysmon telemetry to identify privilege escalation, suspicious process execution, Mimikatz-style behavior, and Active Directory discovery activity, mapping observed TTPs to MITRE ATT&CK.
• Performed network traffic analysis with Wireshark and Nmap to review protocols, connections, and suspicious communication patterns.

Master of Science (M.Sc.) - Botany - SSGM College, Kopargaon (2025-04)

Bachelor of Science (B.Sc.) - Botany - SSKACS, Kolpewadi (2022-04)