Sai Gopal

Entry-level SOC Analyst with hands-on internship experience in real-time security monitoring, alert triage, log analysis, and incident response across SIEM, EDR, and cloud environments. Skilled in identifying indicators of compromise (IOCs), applying MITRE ATT&CK techniques, and documenting findings in ticketing systems per established playbooks and SLAs. Solid foundation in TCP/IP networking, Windows/Linux systems, and common attack vectors including malware, phishing, and network intrusion.

Detail-oriented and collaborative, with a proactive approach to detection engineering and threat intelligence.

Security Analyst Trainee Intern at LS Tech Solutions (2025-02 – 2025-07)

• Monitored SIEM (Splunk, Microsoft Sentinel) and EDR (CrowdStrike, Microsoft Defender) consoles in real time to identify anomalous activity across network, endpoint, and cloud environments.
• Triaged daily security alerts against documented playbooks, assessing severity and scope, filtering false positives, and escalating high-priority incidents.
• Correlated log data across SIEM, EDR, network, and cloud sources (AWS GuardDuty, IAM) to detect suspicious patterns and identify indicators of compromise (IOCs).
• Executed initial containment actions per SOC runbooks, including endpoint isolation and malicious IP blocking, during simulated and real incidents.
• Documented findings, evidence, and root-cause analysis in incident tickets via ServiceNow; supported MITRE ATT&CK-based threat hunting for emerging TTPs.

Cyber Security Intern at Tracelay Networks (2023-06 – 2024-06)

• Performed daily log analysis (TCP/IP, DNS, firewall, proxy) using SIEM (Elastic, QRadar) and EDR (SentinelOne) to detect phishing, malware, and identity-based attacks.
• Collaborated with cross-functional teams to tune SIEM detection rules and use cases, reducing false positives and improving alert quality.
• Conducted periodic threat hunts using threat intelligence feeds and MITRE ATT&CK mappings, identifying visibility gaps and recommending log source improvements.
• Validated log ingestion and data quality in QRadar and other SIEM platforms; supported automation scripts for repetitive triage tasks.
• Prepared weekly and monthly reports on security events, alert trends, and incident metrics for leadership.

B.Tech in Computer Science Engineering (CSE) – Bharath University (2022)