Shijin Suresh

SOC Analyst L2 @ Ansen Technology

About

Enthusiastic Security Analyst with a strong background in supporting Security Operation Centers (SOC) in various Projects (MSSP). Skilled in real-time security event monitoring, incident response and reporting. Proficient in threat hunting, vulnerability management and endpoint security solutions. Security Incidents Detection with hands-on experience in various tools like Azure Sentinel,Microsoft Defender XDR, QRadar, LogRhythm, Carbon Black and SentinelOne to run investigations. Committed to continuous learning in the evolving field of cybersecurity.

Country

United Arab Emirates

City

Abu Dhabi Emirate

Industry

Computer & Network Security

Skill

Jira Service Management, Information Technology, Log Analysis, Jira, ServiceNow, Tufin, Incident Response, Microsoft Defender, sentinel one, Report Writing, Threat Analysis, Reporting & Analysis, Malware Analysis, EDR, CyberProof Defense Center, Netcat, McAfee Web Gateway, Kali Linux, Wireshark, Snort

Experience

SOC Analyst L2

Ansen Technology

2025-3 - 2025-12 · 10 mos

Abu Dhabi Emirate, United Arab Emirates

• Conducted in-depth investigations of escalated incidents, analyzed attack patterns, and recommended remediation measures. • Worked on a custom SIEM platform (UMP) focused on end-to-end detection engineering and security monitoring. • Designed, tuned, and implemented alerting rules to identify sophisticated threats across servers, applications, and cloud environments. • Developed, reviewed, and enforced SOC Standard Operating Procedures (SOPs) and runbooks for consistent and effective incident response. • Collaborated with engineering teams to optimize log ingestion, data pipelines, and detection logic, enhancing the quality and coverage of security monitoring. • Mentored L1 SOC analysts by providing guidance on alert handling, investigation techniques, and tool proficiency. • Continuously evaluated emerging threats, CVEs, and security advisories to proactively update detection capabilities and improve SOC effectiveness.

SOC Analyst

CyberProof

2022-3 - 2024-10 · 2 yrs 8 mos

Kochi, Kerala, India

• Provided 24*7 support for the Security Operation Center (SOC), offering real-time monitoring, Incident response, and reporting of security events for multiple clients. • Adherence to Shift Schedules, shift hand-over and completion of activities designated for the shift within the designated SLAs and KPIs • Implemented host and network-level security measures by configuring and managing policies in Fortigate NGFW, McAfee Proxy, and Azure AD, including blocking remote hosts, malicious URLs, and domains • Investigation on SIEM/EDR Platforms such as Microsoft Sentinel, Defender (EDR), Sentinel One, QRadar, LogRhythm, and Carbon Black. • Performed network vulnerability scans and remediation using Qualys. • Conducted payload analysis using Snorby (GUI of Snort IDS) and IPS logs in Fortigate NGFW. • Escalated cyber security events to Tier 2 specialists or customers based on established playbooks and SOPs for further investigation and resolution. • Prepared and managed daily/weekly status reports, presentations, and threat intelligence reports for clients, ensuring effective communication and transparency.