Vinith J

APPI — SOC & Threat Intelligence Platform

• Developed a SOC operations and Threat Intelligence platform focused on security alert investigation, phishing analysis, IOC enrichment, endpoint security, and L1 SOC operations. • Built a phishing investigation engine performing email authentication analysis (SPF, DKIM, DMARC), sender/domain intelligence, URL investigation, attachment analysis, sandbox-based analysis, IOC extraction, and risk assessment. • Integrated VirusTotal, URLScan, AlienVault OTX, AbuseIPDB, MITRE ATT&CK, and OpenCTI to enrich security alerts and investigate malicious IPs, domains, URLs, hashes, and other IOCs. • Implemented an OpenCTI-based Threat Intelligence Hub for STIX intelligence ingestion, IOC/CVE correlation, threat-actor and malware relationships, intelligence search, and investigation provenance. • Developed L1 SOC monitoring and ticket analysis capabilities, including security-ticket synchronization, alert/message classification, IOC extraction, SLA monitoring, analyst visibility, and SOC activity a

AVANA Google DLP Automation

Designed and implemented an automated DLP alert processing system using Google Apps Script to monitor and classify enterprise DLP alerts (PCI data, PII, account suspensions, password resets). • Developed subject-based alert filtering logic to ensure controlled automation scope and prevent unintended email processing. • Implemented automated True Positive / False Positive classification using internal vs external domain detection to support efficient alert triaging. • Reduced manual SOC effort by ~90% by automating end-to-end alert intake, analysis, and response workflows. • Integrated Gmail API–based in-thread responses with structured audit logging to maintain clear investigation records. • Automatically generated Jira incident tickets with alert metadata, enrichment results, and a complete investigation notepad for case documentation. • Designed SOC escalation workflows following an L1 ownership and L2 review model to ensure proper investigation validation and escalation procedures.