Shubham Davara

I’m a Cybersecurity Analyst with hands-on experience in Security Operations, incident response, and threat detection, with a strong foundation in monitoring, analyzing, and responding to security events across enterprise environments. I have worked extensively with SIEM platforms, endpoint security tools, and network security technologies to identify threats, reduce alert fatigue, and improve response efficiency.

Through professional experience, SOC labs, and real-world simulations, I’ve supported incident triage, log analysis, vulnerability remediation, and security hardening, aligning security operations with frameworks such as NIST CSF and MITRE ATT&CK. I’m particularly strong at translating technical findings into clear, actionable insights for both technical and non-technical stakeholders.

I’m actively seeking Cybersecurity Analyst, SOC Analyst, or Incident Response roles where I can contribute to improving detection accuracy, strengthening security posture, and supporting business resilience.

📍 Location: Canada
✉️ Email: [email protected]

💡 Core Skills

🔍 Security Monitoring & Log Analysis
SIEM: Splunk, Microsoft Sentinel, Sumo Logic

🚨 Incident Detection & Response
Alert triage, escalation, root cause analysis, NIST CSF

🦠 Threat Analysis & Malware Investigation
MITRE ATT&CK mapping, phishing analysis, IOC enrichment

🌐 Network & Cloud Security
Firewalls, IDS/IPS, VPNs, traffic analysis

🖥️ Endpoint Security
EDR tools, endpoint hardening, patch management

🧰 Tools & Platforms
Splunk, Sentinel, Nessus, Wireshark, Snort, Any.Run, ServiceNow, Power BI

💼 Experience Highlights

Cybersecurity / SOC Experience

Monitored and analyzed security alerts to identify suspicious activity and potential threats

Reduced false positives through alert tuning and correlation analysis

Assisted in incident response activities including containment, investigation, and reporting

Performed vulnerability scanning and supported remediation efforts

Documented incidents and created playbooks aligned with security frameworks

IT & Security Support Experience

Supported endpoint security, system hardening, and access controls

Collaborated with cross-functional teams to resolve security and operational issues

Improved security posture through proactive monitoring and patching

🔬 Projects

🧪 SOC Home Lab – Splunk, Snort, Wireshark
Designed and implemented a SOC home lab to simulate real-world attack scenarios, enabling hands-on experience with log ingestion, alerting, and network traffic analysis.

🛡️ Firewall, IDS/IPS & VPN Security Lab
Built a secure network architecture using firewall rules, IDS/IPS monitoring, and VPN access to demonstrate defense-in-depth principles.

🕵️ Threat Hunting & Incident Simulations
Completed multiple hands-on labs focused on malware analysis, phishing detection, and network forensics using industry-standard tools.

📄 Incident Response Playbooks (NIST-Aligned)
Developed incident response playbooks for malware and phishing incidents, covering identification, containment, eradication, and recovery phases.