Yalamarti Raviteja

Cyber Security Analyst with 2 years of hands-on experience in Security Operations Center (SOC), specializing in security monitoring, incident analysis, and threat detection. Experienced in monitoring and investigating security alerts using SIEM platforms, performing log analysis, phishing investigations, endpoint security monitoring, and incident response activities. Proficient in Splunk, IBM QRadar, Microsoft Sentinel, ServiceNow, and Microsoft Defender.

Strong understanding of cybersecurity principles, network security, and security best practices, with the ability to collaborate effectively with cross-functional teams to ensure timely identification, investigation, and resolution of security incidents. A quick learner with strong analytical and problem-solving skills, committed to enhancing organizational security posture.

Cybersecurity Analyst - TCL - Mumbai, India

(2024-07)

• Monitored and analyzed security alerts generated through SIEM platforms such as Splunk, IBM QRadar, and Microsoft Sentinel.
• Performed initial investigation and triage of security incidents, including phishing attacks, malware detections, unauthorized access attempts, and suspicious user activities.
• Investigated endpoint security alerts using Microsoft Defender and EDR solutions to identify and contain potential threats.
• Analyzed Windows, Linux, Active Directory, firewall, VPN, proxy, and authentication logs to detect security anomalies and validate alerts.
• Created, updated, and managed security incident tickets using ServiceNow while ensuring compliance with SLA requirements.
• Escalated critical and high-severity incidents to L2/L3 analysts with complete investigation findings and supporting evidence.
• Conducted phishing email analysis by reviewing email headers, URLs, attachments, and sender reputation, and recommended remediation actions.
• Assisted in SIEM log onboarding for Windows servers, Linux servers, firewalls, and network devices by validating log ingestion, parsing, and data availability.
• Monitored SIEM connectors and data collection pipelines to ensure continuous log flow and reported ingestion issues to the appropriate teams.
• Performed basic troubleshooting for log collection failures, connector issues, and endpoint communication problems.
• Collaborated with infrastructure, network, and application teams during security incident investigations and remediation activities.
• Documented investigation findings, incident timelines, and resolution steps to support audits and knowledge sharing.
• Participated in 24×7 SOC operations, shift handovers, and daily security status reporting to ensure continuous monitoring.
• Followed organizational security policies, incident response procedures, and standard operating procedures (SOPs) while maintaining confidentiality of sensitive information.
• Continuously monitored emerging cybersecurity threats and applied organizational security best practices during incident analysis.

Bharath institute of higher education and research (2024-01)