Sammed Chougule

3+ years SOC experience specializing in SIEM (Splunk) and EDR solutions. Handled real-time threat detection & incident response in a 24x7 SOC environment. Investigated security alerts across SIEM, EDR, IDS/IPS, WAF, and proxy systems.

Executed end-to-end incident response lifecycle, ensuring fast containment & resolution. Leveraged threat intelligence to identify and block malicious IOCs. Performed advanced phishing and malware analysis.

Ensured proper incident documentation, escalation, and SLA compliance. Delivered actionable security reports to improve risk visibility. Actively reduced security risks and operational impact.

Information Security Analyst (SOC L1) at Accenture (2023-06 – Present)

• Monitor and investigate security alerts using SIEM tools (Splunk, QRadar).
• Perform real-time log analysis and event correlation across multiple sources.
• Conduct alert triage and prioritize incidents based on severity and SLAs.
• Analyze and respond to security incidents, phishing emails, and malware threats.
• Review alerts from EDR, IDS/IPS, WAF, firewalls, and proxy systems.
• Detect and block malicious IOCs (IPs, domains, URLs) to prevent threats.
• Leverage threat intelligence tools for effective investigation and analysis.
• Escalate critical incidents to L2/L3 teams as per SOC procedures.
• Create and maintain incident tickets in ServiceNow with proper documentation.
• Perform root cause analysis (RCA) to support incident resolution.
• Monitor cloud security alerts (Azure AD) and take necessary actions.
• Generate security reports and maintain shift handover documentation.
• Collaborate with teams and support users during high-priority incidents.
• Stay updated on emerging cyber threats and security practices.

B. Tech in Computer Science & Engineering (2020 – 2024)