Priyansh Khandal
SOC Analyst & Detection Engineer
Certified SOC Analyst (EC-Council CSA) · MCA Candidate
Professional Summary
Certified SOC Analyst (EC-Council CSA) and MCA graduate student dedicated to blue team defense, SIEM telemetry correlation, and detection engineering. Hands-on experience developing false-positive reduction pipelines, authoring production-grade Sigma rules, investigating in-memory process hollowing with Volatility 3, and configuring enterprise Wazuh/Sysmon monitoring. Immediately available for 24/7 rotational L1/L2 SOC Analyst roles.
Certifications & Accreditations
Certified SOC Analyst (CSA)2026
EC-CouncilIBM Cybersecurity Analyst Professional Certificate2025
IBM / CourseraGoogle Cybersecurity Professional Certificate2025
Google Career CertificatesSOC Level 1 Track & Top Ranked Blue Team2025
TryHackMeTechnical Skills & Stack
SIEM & Telemetry:
Splunk EnterpriseElastic SecurityWazuh EDRSysmon (EID 1, 3, 10, 22)Windows Security Event LogsLinux auditd
Detection & Hunting:
Sigma RulesYARAMITRE ATT&CK MappingSplunk SPLElastic Query DSLAtomic Red Team
Digital Forensics & IR:
Volatility 3 (Memory Analysis)KAPEWiresharkZeek (Network Security)Process Hollowing TriageTimeline Reconstruction
Automation & Scripting:
Python 3PowerShellBashVirusTotal v3 APIAbuseIPDB APIShodan REST APIGit / GitHub Actions
Hands-on SOC Experience & Labs
SOC Analyst & Blue Team Researcher
Independent Security Lab & Blue Team Projects- Built an enterprise virtualized SOC lab on Proxmox VE with multi-VLAN segmentation, Wazuh Manager, and active Sysmon log ingestion across Windows domain endpoints.
- Engineered automated alert enrichment pipeline integrating VirusTotal and AbuseIPDB APIs, cutting repetitive false positive alert noise by 60% and reducing mean triage time to under 4 minutes.
- Authored and validated 20+ vendor-agnostic Sigma detection rules targeting LOLBins, encoded PowerShell cradles, and process hollowing, compiled to Splunk SPL.
- Investigated raw host memory dumps using Volatility 3 (malfind, pstree, vadinfo) to detect reflective DLL injections and carve payload binaries.
Education
Master of Computer Applications (MCA)
Active University Graduate StudentCore focus: Advanced operating systems, distributed network security, cryptography, and enterprise computing systems.