Pratima Gupta

About Pratima Gupta

Cybersecurity Analyst with 3.5 years of hands-on experience in Security Operations Center (SOC) environments, specializing in threat detection, incident response, and security monitoring.Currently working as a SOC Analyst at Intenso Tech Solution Pvt. Ltd, I actively monitor and investigate security incidents using SIEM tools like Splunk and LogRhythm, along with EDR solutions such as CrowdStrike and NDR tools like Darktrace. I have strong expertise in phishing analysis, malware investigation, and threat hunting using frameworks like MITRE ATT & CK and the Cyber Kill Chain.I am skilled in analyzing network traffic, identifying anomalies, and responding to advanced threats including ransomware and fileless malware. I also have experience in fine-tuning SIEM rules, creating correlation searches, and reducing false positives to improve detection accuracy.With a solid foundation in networking concepts (TCP/IP, DNS, ports, protocols) and hands-on experience with tools like Wireshark and OSINT platforms (VirusTotal, AbuseIPDB, Talos), I aim to continuously strengthen organizational security posture.I am passionate about cybersecurity and always eager to learn and adapt to evolving threats and technologies.

Experience

1. Soc Analyst

   Intenso Tech Solution Private Limited

   Sep 2022 — Present · Bengaluru, IN

   Monitor security alerts and network activities to detect and respond to potential threats in a 24x7 SOC environment• Investigate phishing emails, malicious domains, and IPs using OSINT tools and recommend mitigation actions• Perform threat hunting using methodologies like Pyramid of Pain and MITRE ATT & CK• Analyze and respond to malware, ransomware, and fileless attacks using CrowdStrike EDR• Develop and optimize SIEM use cases, correlation rules, dashboards in Splunk and LogRhythm• Fine-tune detection rules to reduce false positives and improve alert accuracy• Perform packet analysis using Wireshark for deeper investigation• Collaborate with networking teams to resolve log ingestion and connectivity issues• Handle incident response and ticket management through ServiceNow• Engage with clients during critical incidents and provide remediation support

Education

• Jiwaji University

  Bachelor of Engineering - BE, Computer Science