Skip to main content
Back to Home
Operational Experience Timeline

Cybersecurity & SOC Experience

Practical Security Operations Center (SOC) threat monitoring, log triage, and vulnerability assessment experience completed during an 8-month intensive internship.

InternshipAugust 2024 – March 2025Kerala, India

Cybersecurity Intern

RedTeam Hacker Academy

Duration: 8 Months

Operational Scope

Participated in foundational Security Operations Center (SOC) activities including real-time event monitoring, log analysis, vulnerability assessments, and security reporting.

Core Responsibilities & Daily Triage

Assisted with real-time threat monitoring and Tier 1 incident response procedures within simulated and training SOC environments.
Analyzed authentication logs, network event streams, and endpoint activity to assist in identifying anomalies and triage security events.
Conducted vulnerability assessments using industry scanners and drafted structured security assessment reports.
Gained hands-on operational exposure to SIEM platforms (Splunk, IBM QRadar, Microsoft Sentinel) and standard SOC workflows.

Security Platforms Handled in Practice

Splunk

Querying authentication and event logs with SPL, monitoring SOC dashboards, identifying brute force patterns.

IBM QRadar

Reviewing offenses, correlating event flows, inspecting rule triggers for anomalies.

Microsoft Sentinel

Analyzing cloud telemetry, executing KQL queries, triaging endpoint security incidents.

Wireshark

Packet capture inspection, protocol stream dissection (TCP/UDP/DNS/HTTP), anomalous traffic analysis.

Nessus

Executing authenticated and unauthenticated vulnerability scans, drafting CVE remediation prioritization.

Kali Linux

Hands-on utilization of defensive testing toolsets within simulated network labs.

Maltego & SpiderFoot

Open-source intelligence (OSINT) footprinting and adversary infrastructure mapping.

Burp Suite

Basic web proxy traffic interception and HTTP request/response inspection.