SOC Incident Response Analyst (Splunk, Threat Detection)

ANIRUDH VEGULLA

Cyber Security Incident Response Analyst SOC Security Monitoring Splunk SIEM.

Jacksonville, FL • +1-470-***-**** • ****************@*****.*** • linkedin.com/in/anirudhsurendra PROFESSIONAL SUMMARY

SOC analyst with 4+ years across security monitoring, alert triage, incident investigation, and detection engineering with Splunk SIEM. Currently at Charter Communications supporting security operations: triaging alerts, investigating phishing, brute-force, and suspicious authentication activity, mapping detections to MITRE ATT&CK, and documenting incidents through escalation and closure. Pair hands-on detection work with GRC depth — control testing, vulnerability management, and audit evidence — across NIST CSF, PCI-DSS, and HIPAA environments. Available for rotating shifts and 24/7 SOC coverage. CORE SKILLS

• SOC & Incident Response : Security Event Monitoring, Alert Triage & Investigation, Incident Documentation

& Escalation, Indicators of Compromise (IOCs), Incident Response Lifecycle, Threat Hunting Fundamentals, 24/7 SOC Operations.

• SIEM & Threat Detection : Splunk SIEM (SPL, Dashboards, Alerts), Detection Rule Development

& Tuning, MITRE ATT&CK Mapping, Brute-Force / Phishing / Exfiltration Detection, Log Analysis

(Windows, Firewall, Proxy, Endpoint).

• Vulnerability & Threat Management : Nessus, CVSS Scoring, Risk-Based Prioritization, Remediation Tracking, OWASP Top 10.

• GRC (Supporting): Control Testing & Gap Analysis, Audit Evidence Collection, Risk Register Management, User Access Reviews, NIST CSF, ISO 27001, PCI-DSS, HIPAA.

• Tools & Platforms: Splunk, Nessus, Nmap, Wireshark, Kali Linux, Metasploit, ServiceNow, Windows, Linux, TCP/IP.

PROFESSIONAL EXPERIENCE

Security & Compliance Analyst – Charter communications July 2024 – Present Remote (HQ: Stamford CT)

• Triage 40+ security alerts per shift in Splunk SIEM — phishing, brute-force logins, suspicious authentication, and potential data exfiltration — investigating each through log analysis and escalating confirmed incidents with documented timelines.

• Develop and tune Splunk detection rules and alerts, reducing false positives and improving detection fidelity for brute-force and phishing patterns.

• Map alert patterns and investigation findings to MITRE ATT&CK techniques to standardize triage and improve detection coverage.

• Build and maintain Splunk dashboards for real-time security event monitoring, giving analysts at-a-glance visibility into alert volume, severity trends, and investigation status.

• Support security investigations by collecting technical evidence — logs, system information, vulnerability findings, control documentation — and maintaining investigation-ready documentation through escalation and closure.

• Analyze 200+ Nessus vulnerability findings per scan cycle, prioritizing by CVSS severity, asset criticality, and business risk; coordinate remediation timelines with system owners and track through closure.

• Perform security control testing and gap assessments (60+ controls per cycle) against NIST CSF and PCI-DSS requirements.

• Communicate security risks, incident findings, and remediation requirements to technical and non-technical stakeholders across multiple time zones.

GRC Associate – Global Logic Oct 2020 – Nov 2022

Hyderabad, India (Remote)

• Collected and reviewed 100+ evidence artifacts per audit cycle (logs, screenshots, policies, system documentation) for internal and external audits; maintained a centralized evidence repository that reduced turnaround on repeat audit requests.

• Performed gap assessments against ISO 27001 and NIST CSF, documenting deficiencies and tracking remediation actions with control owners.

• Mapped 80+ controls across NIST CSF, ISO 27001, HIPAA, and PCI-DSS to streamline multi-framework compliance reporting.

• Supported risk assessments documenting threats, vulnerabilities, likelihood, impact, and recommended treatments.

• Drafted and updated 20+ cybersecurity policies, procedures, and SOPs. PROJECT

Operation Watchtower — SOC / SIEM Detection Lab

Splunk MITRE ATT&CK Kali Linux

• Built a Splunk-based lab centralizing logs from multiple sources (Windows Event Logs, firewall, simulated attack traffic) for security event monitoring.

• Developed 15+ detection rules and alerts for brute-force attacks, phishing indicators, and data exfiltration using SPL; tuned thresholds to balance detection rate against false positives.

• Investigated alerts through log analysis, mapped every detection to MITRE ATT&CK techniques, and documented the full incident workflow from detection and analysis through escalation and reporting.

• Built Splunk dashboards tracking alert volume, severity distribution, and mean time to triage; aligned lab detections to PCI-DSS and SOC 2 control objectives. EDUCATION

M.S. Cybersecurity - Lewis University, USA 2024

B.S. Computer Science - JNTUH, India 2019

CERTIFICATIONS

CompTIA Security+ - In Progress

Contact this candidate