Shakul Kaushik

WORK HISTORY

EDUCATION

ABOUT SHAKUL KAUSHIK

2+ years of hands-on experience as a Security Operations Center (SOC) Analyst,specializing in real-time security monitoring, incident response, and proactivethreat hunting. Proven expertise in identifying and mitigating security threatsacross diverse environments using SIEM tools (e.g, Splunk, QRadar, SOAR),endpoint detection and response (EDR-Crowdstrike) platforms, and threatintelligence frameworks.Adept at investigating security incidents, analyzing indicators of compromise(IOCs), and conducting root cause analysis to strengthen overall security posture.Experienced in creating detection rules, fine-tuning alerts, and leveraging MITREATT & CK framework to guide threat hunting activities.Experience-Au Small Finance BankSOC AnalystTools: IBM QRadar, Splunk, CrowdStrike Falcon EDRAs a dedicated SOC Analyst with 2+ years of experience, I havedeveloped strong expertise in security monitoring, threat detection,and incident response within enterprise environments. I have hands-onexperience using IBM QRadar and Splunk for SIEM and logcorrelation, as well as CrowdStrike Falcon for endpoint detectionand response (EDR). My role has involved proactive threat hunting, in-depth analysis of security events, and coordination with internal teamsfor rapid remediation of incidents.Key Responsibilities -Monitored and analyzed real-time security alerts using QRadar andSplunk to detect indicators of compromise (IOCs) and potentialsecurity breaches.Use SOAR to run multiple types of playbooks like -IP block onfirewall, Check reputation on multiple threat intelligences (like-virus total IBMx force, AbuseIPDB.Create alert ticket and raised to respective team.Generate weekly and monthly report and tracker.Created and tuned correlation rules and use cases in QRadar andto improve detection capabilities and reduce false positives.Perform Log source review and troubleshooting.Perform use cases Simulation activity to check all use cases rulesworking properly or not.Performed Red Team activities like-scan the network using NMAPand enumeration -find the subdomains(using tool-subfinder,sublist3r) and hidden directory(using tools-Gobuster,Dirbuster).Performed proactive threat hunting based on threat intels and IOCreceived/collected from multiple sources and deployed honeypots.RUN ODS scan on endpoints using crowdstrike.Ensured incident response procedures were followed in line withSLA and regulatory requirements.