AJIT NAYAK

Targeting: Bangalore, India (Immediate Relocation) | Remote

SOC ANALYST // CYBERSECURITY

ajit.nayak.028@gmail.com linkedin.com/in/ajit028 github.com/ajit028

PROFESSIONAL SUMMARY

Proactive, results-driven B.Tech Computer Science graduate certified in Advanced Cybersecurity with GenAI (Career247). Specialized in Security Operations Center (SOC) engineering, Microsoft Sentinel SIEM, KQL event correlation, network packet forensics, and enterprise Active Directory hardening. Seeking an entry-level SOC Analyst / Network Security position in Bangalore with immediate availability.

CORE TECHNICAL SKILLS

SIEM & Log Analytics

Microsoft Sentinel, Azure Log Analytics, KQL (Kusto Query Language), Splunk Fundamentals, Sysmon, Windows Event Logs (4624, 4625, 4769, 7045).

Network Defense & Forensics

Wireshark (Deep Packet Inspection), tcpdump, Snort/Suricata IDS/IPS Rules, Nmap Port Auditing, Zeek, TCP/IP, DNS, HTTP/S, SMB.

Threat Hunting & Frameworks

MITRE ATT&CK Mapping, IOC Extraction & Triage, Incident Response Playbooks, Active Directory Hardening, BloodHound Attack Paths.

AI & Scripting Tools

GenAI for Threat Triage & Summaries, Python 3 (APIs & Automation), Bash Scripting, PowerShell, Linux (Ubuntu/Debian), Windows Server.

PROFESSIONAL CERTIFICATIONS

Advanced Cybersecurity with GenAI Certification

Career247 — Hands-on Industry Training

2025 — 2026

Trained in SOC Tier 1/2 operations, Microsoft Sentinel SIEM engineering, and custom KQL alert design.
Applied Generative AI techniques to automate security log triage, extract IOC patterns, and draft incident response playbooks.
Mastered network forensics in Wireshark, Snort NIDS signature crafting, and Active Directory Kerberos security auditing.

FEATURED CYBERSECURITY PROJECTS

Azure Sentinel Cloud Honeypot & SIEM Threat Detection Microsoft Sentinel | KQL | PowerShell | Azure

Deployed an intentionally vulnerable Windows VM in Microsoft Azure configured with open RDP ports to attract and log live worldwide threat actors.
Ingested over 14,000+ failed and successful authentication events into Log Analytics Workspace and parsed attacker geolocation data via custom PowerShell script.
Engineered automated KQL detection queries to flag brute-force threshold breaches and mapped real-time attack origins onto Sentinel visual workbooks.

Active Directory Enterprise Security Auditing & Hardening Active Directory | BloodHound | GPO | Kerberos

Constructed a multi-tier Active Directory domain lab to simulate credential attacks including Kerberoasting, AS-REP roasting, and pass-the-hash.
Audited privilege delegation and shortest attack paths to Domain Admin using BloodHound and SharpHound graph collector.
Remediated vulnerabilities by disabling legacy RC4-HMAC ciphers, converting vulnerable SPNs to gMSA accounts, and implementing CIS benchmark GPOs.

Enterprise PCAP Malware Forensics & Snort Rule Engineering Wireshark | tcpdump | Snort NIDS | MITRE T1071

Conducted deep packet inspection (DPI) on suspicious enterprise network captures to isolate command & control (C2) beaconing and unencrypted data exfiltration.
Carved malicious binary payloads transferred across TCP streams and identified malware communication intervals.
Authored custom Snort NIDS signatures matching specific malicious URI patterns to automate network-level threat alerting.

Automated Threat Intelligence & IOC Extraction Engine Python 3 | VirusTotal API | AbuseIPDB | Regex

Developed a modular Python automation tool that extracts IP addresses, domain names, and file hashes (MD5, SHA256) from raw security logs using regex.
Integrated multi-threaded queries against VirusTotal and AbuseIPDB API endpoints to calculate unified risk scores, reducing Tier 1 triage time by over 60%.

EDUCATION

Govt. College of Engineering, Kalahandi

Bachelor of Technology (B.Tech) in Computer Science & Engineering

2021 — 2025 | CGPA: 7.44 / 10.0

Coursework: Computer Networks, Network Security, Operating Systems, Database Management Systems, Object-Oriented Programming, Cryptography.