Nikita Ghule

About Nikita Ghule

Detail-oriented and proactive SOC Analyst with over 1+ year of hands-on experience in Security Operations, Incident Detection, and Response. Proficient in utilizing SIEM tools like Splunk and Azure Sentinel and EDR/XDR platforms such as SentinelOne. Skilled in investigating security incidents,malware behavior, PowerShell-based ttacks, and Windows event analysis. Adept at creating detection rules, analyzing scheduled taskabuse, and mitigating endpoint threats in real-time.

Experience

1. Soc Analyst

   Network Intelligence

   Jul 2024 — Present · Mumbai, IN

   Provide 24/7 monitoring and analysis of security alerts across various technologies in a rotational shift model.Monitor and analyze security alerts from Splunk ES SIEM tools for anomaly detection and threat patterns.Utilize SentinelOne EDR/XDR to perform endpoint investigations and respond to real-time threats.Perform malware analysis (Static/Dynamic) to determine indicators of compromise (IOCs).Investigate suspicious PowerShell scripts, scheduled tasks, registry changes, and persistence mechanisms.Create and tune correlation rules and dashboards in Splunk for threat detection and visibility.Execute triage, containment, and remediation steps for high-severity alerts, including ransomware and phishing incidents.Analyze and correlate firewall, IDS/IPS, antivirus, and proxy logs to detect anomalies and potential intrusions.Investigate phishing incidents reported through Microsoft 365 Defender, including email header analysis, URL inspection, attachment sandboxing, and user impact assessment.Identify and mitigate suspicious activity involving PowerShell scripts, scheduled tasks, and known persistence techniques.

Education

• Annasaheb Dange College of Engineering and Technology, ASHTA

  Bachelor of Engineering, Computer Science and Engineering (IOT and Cyber Security Including Block Chain Technology)

  2021 — 2025