// SECURITY ANALYST

TUSHAR
KUMAR SWAMI

root@soc:~$ █

Active Directory SOC Monitoring Detection Engineering Blue Team Splunk SIEM

↓ Download Resume ⌥ GitHub
2
SIEM Labs Projects
7+
Certifications
203
THM Rooms
01

About Me

Cybersecurity student specializing in SOC operations and detection engineering — building defenses from the ground up.

I've built multiple hands-on lab environments simulating real-world attack scenarios including brute-force attempts, password spraying, lateral movement, and privilege escalation within Active Directory environments.

My work centers on analyzing Windows Security Event Logs, developing SPL-based detection rules, building correlation searches, and implementing anomaly detection to identify authentication-based threats.

Actively seeking SOC operations, threat detection, and blue team roles where I can bring practical SIEM and log analysis skills to a real team.

whoami.sh
$ whoami
tushar_kumar_swami
$ cat focus.txt
SOC Tier 1 Analyst
Detection Engineering
Blue Team Operations
$ uname -r
BCA Graduate @ DSEU Dwarka, Delhi
$ uptime
Learning since 2023 — no downtime
02

Projects

01

Active Directory Security Monitoring Lab

Splunk Enterprise | Detection Engineering | MITRE ATT&CK

Domain-based lab environment with detection rules for brute force, password spraying, lateral movement, and privilege escalation. Built an AI-based login anomaly detection model with 2-sigma statistical baseline and risk scoring system.

SplunkActive DirectorySPLMITRE ATT&CK
02

Real-Time Cyber Attack Detection

Splunk SIEM | Threat Detection | SOC Lab

SOC lab environment for real-time authentication monitoring. Configured centralized log collection from Windows systems with detection rules for brute-force, suspicious login patterns, and abnormal process execution.

SplunkHydraNmapKali Linux
03

AI-Powered Log Anomaly Detection System

SOC | Machine Learning | SIEM | Threat Detection

Python-based security analytics system that analyzes Windows Security Event Logs using unsupervised machine learning. Combines Isolation Forest and LOF, forwards anomaly alerts to Splunk through HEC, and visualizes results through a Flask SOC dashboard.

PythonMachine LearningSplunkFlaskWMI
03

Certifications

◈

Google Cybersecurity Professional

Coursera

8-course program covering Linux, SQL, Python, SIEM, IDS, risk management, and incident response.

◈

Pre Security & Cyber Security 101

TryHackMe

Foundational Offensive & Defensive Concepts. SOC Apprentice Badge earned.

◈

SOC Level 1 Certificate

TryHackMe

Learn SOC tools and operations, Explore network and web attacks, Monitor endpoints for threats, Utilise SIEM to handle incidents

◈

Ethical Hacking Certificate

NPTEL — IIT Kharagpur

12-week course on ethical hacking, network security, and attack methodologies.

◈

Deloitte Cyber Simulation

Forage

Analyzed web activity logs, supported a client through a cybersecurity breach, identified suspicious user activity.

◈

Mastercard Cybersecurity Simulation

Forage

Security Awareness Team analyst role — identified phishing threats and designed targeted security training programs.

◈

Tata Cybersecurity Analyst Simulation

Forage — TCS

IAM projects aligned with TCS consulting practices — security strategy, documentation, and presentations.

◈

Ethical Hacking Certificate

Tutedude

Penetration testing fundamentals, reconnaissance, vulnerability assessment, and basic exploitation techniques.

◈

Web Fundamentals Certificate

TryHackMe

Understand web fundamentals, Major vulnerabilities explained, Learn industry-used tools, Web application assessments

04

TryHackMe

☠
vaishnavt700
TOP 2% [0xA][MASTER] Student · IN
View Profile →
#27434
Global Rank
203
Rooms Done
36
Badges
TOP 2%
Percentile
// Earned Badges
SOC Apprentice First alert closed Network Hog Wireshark Phish Hunter +20 more
05

Contact

Open to SOC internships and blue team roles. Let's connect.