Roshan Karki

SOC Analyst with hands-on experience in SIEM monitoring (Google Chronicle, Splunk), incident triage, and vulnerability management. Proficient in NIST CSF, MITRE ATT&CK, and compliance standards (HIPAA, PCI DSS, GDPR). Automates security workflows using Python and PowerShell.

SOC Intern at Nexus Shields (2025-05 – 2025-12)

• Analyzed and documented 20+ daily security alerts, achieving low escalation rates through improved triage accuracy and timely incident escalation per procedures.
• Collaborated with IT teams to isolate compromised systems, reset passwords, and assist with vulnerability scanning and patch management for 200+ assets.
• Optimized detection rules, reducing false positives and creating suppression rules, while actively managing SOC case workflows using Google Chronicle for proper documentation and incident closure.
• Updated internal knowledge base with 30+ threat detection playbooks and SOPs, and reviewed threat intelligence feeds to identify emerging risks.
• Shadowed senior analysts in incident response investigations, including malware analysis and log forensics, contributing to enhanced team capabilities.

SOC Intern at Silver Hill (2025-01 – 2025-05)

• Monitored and triaged alerts from SIEM (Splunk), EDR (CrowdStrike), and IDS/IPS tools, escalating critical incidents and documenting in ServiceNow and Jira
• Conducted vulnerability scans using Nessus and Qualys, categorized risks, and provided remediation guidance for compliance
• Resolved phishing and malware incidents, improving response times through playbook adherence
• Performed threat hunts using IOC databases to isolate compromised endpoints
• Reviewed cloud security posture and reported misconfigured AWS S3 buckets and IAM roles
• Participated in 24/7 on-call rotations, responding to after-hours security incidents
• Utilized SOC case management best practices to track alert investigations and maintain audit-ready case notes

B.S in Computer Information Technology (Cybersecurity Track) – Northern Kentucky University (2026-05)