Tushar Patil

About Tushar Patil

Experienced Cybersecurity Analyst with 3 years in SOC operations, specializing in real-time threat detection, incident response, and proactive threat hunting. Proficient in SIEM platforms (QRadar, Splunk), EDR solutions (CrowdStrike), and security tools including IDS/IPS, WAF, and firewalls. Skilled in log analysis, phishing investigation, malware file analysis, and correlating security events. Adept at identifying attack patterns, refining detection rules, and implementing IOCs to strengthen security defenses. Strong expertise in enhancing security posture, enforcing policies, and mitigating cyber threats efficiently.

Experience

1. Soc Analyst

   Tata Consultancy Services

   Mar 2024 — Present · Mumbai, IN

   Working in a 24x7 Security Operations Center (SOC), monitoring real-time events. • Using SIEM tools (QRadar, Splunk,) and EDR solutions (CrowdStrike) to detect and respond to threats. • Analyzing logs from SIEM, IDS/IPS, WAF, firewalls, proxies, and databases to identify attack patterns and security breaches. • Investigating threats, correlating multi-platform data, implementing IOCs and use cases. • Responding to EDR alerts, identifying malicious activity, and proactively hunting threats. • Analyzing phishing emails and suspicious files to detect and prevent threats. • Managing incidents with ServiceNow and other ticketing systems, ensuring proper tracking and resolution. • Enforcing security policies, improving incident response, and strengthening overall security posture. • Coordinating with SOC analysts, ensuring SLA adherence, and maintaining performance under pressure. • Completing daily health checks and preparing client reports.

Education

• Shivaji University

  Bachelor of Engineering Be

  2015 — 2020