What Soham demonstrated

Built an end-to-end beginner SOC incident workflow: triaged a phishing email, mapped observed events to the cyber kill chain, investigated anomalous authentication logs including impossible travel, and selected a sound containment sequence. Also drafted a GDPR Article 33 breach notification and tied lessons from the Continental case to a concrete control recommendation grounded in public facts.

• Leakage-Free Threat Triage
• Evidence-Based Log Investigation
• Structured Incident Response
• Executive Security Communication