Amit Salavi

About Amit Salavi

I am an Information Security Analyst with strong hands-on experience in SOC monitoring, SIEM (Splunk, QRadar), and EDR platforms such as CrowdStrike and Microsoft Defender.My daily work revolves around detecting, analyzing, and responding to security incidents across endpoints, networks, and email channels.I specialize in:• Real-time threat detection & incident triage• Investigating malware, phishing, and suspicious behavior• Log analysis across firewalls, IDS/IPS, proxy, and database systems• Endpoint investigations and basic threat hunting• Managing incidents through ServiceNow with SLA-based workflowI focus on structured analysis, clean documentation, and improving SOC processes. I enjoy breaking down alerts, understanding attacker behavior, and helping strengthen overall security posture.

Experience

1. Information Security Analyst L1

   Accenture

   May 2023 — Present · Pune, IN

   Monitoring security events in 24×7 SOC environment using Splunk and QRadar.Investigating endpoint alerts using CrowdStrike & Microsoft Defender.Analyzing logs from IDS/IPS, firewall, proxy, and DB systems to identify threats.Performing threat hunting & malware investigation on suspicious files/processes.Handling phishing and email-based attacks using Microsoft Defender.Managing and documenting security incidents in ServiceNow as per SLAs.Supporting SOC operations through daily health checks, reporting, and escalation.Contributing to improvement of detection rules and incident workflow.