Rithvik Reddy

SOC Analyst with 3+ years of experience in real-time security monitoring and incident handling. Skilled in using SIEM tools, EDR solutions, and analyzing security alerts across Windows, Linux, and network environments. Experienced in identifying threats such as phishing, malware, and brute-force attacks, performing initial triage, and escalating incidents with detailed analysis.

Strong understanding of log analysis, threat detection, and working in 24/7 SOC environments. Passionate about cybersecurity and continuously improving skills in threat analysis and incident response.

Security Operations Center Analyst - onestop

(2022-12)

• Monitored and analyzed security alerts using SIEM tools (ArcSight, Splunk, Microsoft Sentinel, IBM QRadar)
• Performed alert triage to identify true positives and reduce false positives
• Investigated security incidents using EDR tools (CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Carbon Black)
• Analyzed phishing emails and malware-related alerts using Microsoft Defender for Office 365 & Proofpoint
• Monitored and analyzed firewall logs using Palo Alto, Cisco ASA, Fortinet
• Investigated network threats using IDS/IPS tools (Snort, Cisco Firepower)
• Performed log analysis across Windows, Linux servers, and network devices
• Conducted threat hunting using SIEM, Threat Intelligence platforms (Recorded Future, ThreatConnect)
• Used Wireshark and Nmap for network traffic analysis and investigation
• Responded to incidents like phishing, malware infections, brute-force attacks, and suspicious logins
• Escalated confirmed incidents to L2 teams with detailed analysis, logs, and remediation steps
• Worked with SOAR tools (Google SecOps / Chronicle SOAR) for automated incident response
• Monitored cloud security alerts using Microsoft Azure Security Center / Defender for Cloud
• Followed SLA and incident response procedures for handling critical alerts
• Collaborated with DevOps, Infra, and Security teams for faster resolution
• Created and maintained incident reports, SOPs, and shift handover documentation
• Supported vulnerability management using Qualys / Nessus
• Worked in a 24/7 SOC environment handling multiple alerts simultaneously
• Continuously improved detection rules and reduced alert noise in SIEM
• Stayed updated with latest threats, attack patterns, and cybersecurity trends

B.Tech / B.E. - malla reddy college of engineering (2024)