Samruddhi Gaikwad

I help organisations detect and respond to threats before they cause damage. 2 years in SOC operations — monitoring alerts in Securonix, hunting threats with CrowdStrike Falcon EDR, investigating phishing and malware incidents end-to-end, and keeping cloud and network environments secure using Zscaler, Proofpoint, and Orca Security. Skilled in identity threat detection with a CrowdStrike CCIS certification.

Cyber Security Analyst (SOC L1) at Persistent Systems (2024-02 – Present)

Security Operations Center (24×7)

• SIEM Monitoring (Securonix): Triaged security alerts, tuned correlation rules to reduce false positives, and monitored network traffic and logs to detect threats and IoCs.
• Incident Response: Executed end-to-end IR for malware, unauthorized access, phishing, and data leakage events following NIST/SANS frameworks — detection through containment and documentation.
• Endpoint Security (CrowdStrike Falcon EDR): Investigated endpoint alerts using process trees and threat graph to trace attack chains, identify malicious behavior, and scope compromises.
• Threat Intelligence (Recorded Future): Enriched investigations by querying IoCs (IPs, domains, hashes) for threat actor attribution, malware family context, and campaign intelligence.
• Network & Proxy Security (Zscaler ZIA): Analyzed web proxy and firewall logs to detect C2 traffic, suspicious outbound connections, data exfiltration, and policy violations.
• Email Security (Proofpoint, Cisco Email Gateway): Investigated phishing emails via header analysis and sandbox detonation; extracted IoCs and escalated confirmed threats.
• DLP (Trellix, Microsoft Defender, Proofpoint, Zscaler): Monitored and investigated data loss prevention alerts across endpoint, email, and web channels; differentiated false positives from true violations.
• Cloud Security (Orca Security CNAPP): Reviewed CNAPP findings for cloud misconfigurations and exposed assets; escalated critical risks to remediation teams.
• Cross-functional Collaboration: Escalated high-severity incidents to SOC L2 with evidence-based reports; coordinated containment with IT, network, and security engineering teams.

B.E. in Electronics & Telecommunication – AISSMS Institute of Information Technology, Pune (2019 – 2023)