I'm Gunaseelan — a SOC Analyst who spent a year monitoring alerts, investigating threats, and responding to incidents in a real 24×7 operations center. I'm building on that foundation and open to new opportunities.
Monitoring and triaging alerts across Splunk, QRadar, and Microsoft Sentinel. I can work through alert queues, classify true/false positives, and write up clear findings — from a year of doing exactly this in a live SOC.
From Telesoft SOCWriting basic-to-intermediate SIEM detection rules and correlation searches aligned to MITRE ATT&CK. I built and tuned detection logic during my SOC role to reduce noise and catch real threats.
From Telesoft SOCDigging through logs from network, endpoint, and OT data sources to find indicators of compromise. I did this daily — pulling logs, correlating events, and building a picture of what happened.
From Telesoft SOCFirst-line incident triage, initial containment steps, and documentation. I followed structured IR playbooks in production, escalating when needed and closing out lower-severity incidents independently.
From Telesoft SOCSecurity monitoring for Operational Technology environments alongside standard IT infrastructure. I supported both simultaneously at Telesoft, giving me exposure to OT-specific threats and protocols most analysts haven't seen.
From Telesoft SOCBasic Python and Bash scripts for repetitive security tasks — log parsing, IOC lookups, alert enrichment. I built small utilities during my SOC work to save time on repetitive analyst tasks.
From Telesoft SOCWorking at IBM as an Associate System Engineer specialising in SAP ABAP on HANA. Developing ABAP programs on the SAP HANA platform, working with CDS views and AMDP, and collaborating with functional teams to translate requirements into SAP solutions.
Worked in a 24×7 Security Operations Center monitoring enterprise and OT environments. Day-to-day work involved SIEM alert triage, EDR investigation, log analysis, and first-line incident response across Splunk, QRadar, and Microsoft Sentinel. Also contributed to writing detection rules and basic automation scripts to reduce analyst toil.
Set up a home lab SOC environment using ELK Stack and Suricata IDS to practice what I was doing at work. Built detection rules, generated test traffic, and used Kibana dashboards to investigate alerts — good way to learn outside of the job.
A Python + Bash utility that automates Linux security hardening tasks — firewall rules, disabling unused services, password policies, and CIS Benchmark checks. Built this to understand hardening properly rather than just follow a checklist.
Demonstrates foundational understanding of cybersecurity concepts, threat groups, attack types, social engineering, security strategies, cryptography, and organisational approaches to preventing, detecting, and responding to cyber attacks.
Verify on Credly ↗SOC workflows, emerging threat landscape, and first-responder security operations
Alert triage, escalation procedures, and hands-on SOC environment operations
LOADING RESUME...
I'm a SOC analyst with about a year of hands-on experience, currently at IBM. If you have a cybersecurity project, a junior analyst role, or just want to talk security — reach out. I'll reply within 24 hours.