Melbourne, VIC — Available Now

Prem Sai Dhulipala

Junior SOC Analyst · Azure Sentinel · AWS Cloud Security
Building detection pipelines that find threats before they find you.

❯

Threat Detection Incident Response KQL ACSC Essential Eight Python MITRE ATT&CK Azure Sentinel AWS Security Sysmon NLP / ML

Email Me LinkedIn View Work ↓

analyst@soc-melbourne:~

❯ cat profile.json ────────────────────────────── name : "Prem Sai Dhulipala" role : "Junior SOC Analyst" location : "Melbourne, AU 🇦🇺" status : ✓ Open to Hire ❯ run threat-scan --live ────────────────────────────── ✓ Azure Sentinel pipeline active ✓ KQL alert rules deployed ✓ MITRE ATT&CK mapped ✓ Phishing ML model live on HF ✓ AWS IAM hardened ❯ hire --candidate prem

Projects Shipped

Years Experience

Degrees Earned

Threats Hunted

01 / Skills

Security Expertise

SIEM & Threat Detection

Microsoft SentinelKQLLog AnalyticsAlert EngineeringIncident Triage

Cloud Security

AzureAWS IAMEC2 / S3 / VPCLeast-PrivilegeSecurity Groups

Endpoint & Windows Security

SysmonWindows Event LogsAzure Monitor AgentDCR

Network Security

WiresharkNmapDNS/DHCPFirewall RulesTraffic Analysis

Frameworks & Standards

MITRE ATT&CKACSC Essential EightNIST CSFISO 27001

Security Tooling & Programming

PythonBashDistilBERT / NLPHugging FaceGit

02 / Projects

What I've Built

PROJECT_01 ★ Featured — Hands-On SOC Lab

Cloud SOC Analyst Home Lab

Built a full cloud-based Security Operations Center in Microsoft Azure — deploying a Windows Server VM, configuring Sysmon endpoint telemetry, and integrating with Microsoft Sentinel (SIEM) for real detection engineering and incident investigation.

Deployed Azure Virtual Machine (Windows Server) with Azure Monitor Agent and Log Analytics Workspace, onboarded to Microsoft Sentinel via Data Collection Rule for centralised log ingestion.
Installed and configured Sysmon to capture granular endpoint telemetry — process creation, network connections, system activity — forwarded to Sentinel.
Engineered custom Scheduled Alert Rule to detect brute-force login attempts (Event ID 4625) — mapped to MITRE ATT&CK T1110. Confirmed full pipeline: log ingestion → alert firing → incident creation.
Built second detection rule for suspicious CMD/PowerShell execution (Event ID 4688) — mapped to MITRE ATT&CK T1059.
Wrote and validated KQL queries to investigate incidents, filter security events, and confirm telemetry fidelity.

Microsoft SentinelAzure VMLog AnalyticsAzure Monitor AgentSysmonKQLWindows Event Logs MITRE T1110MITRE T1059

PROJECT_02

Phishing Detection System

Machine learning-based phishing URL classifier using DistilBERT NLP. Hosted on Hugging Face Hub. Identifies malicious web content by combining NLP feature extraction with classification — directly applicable to SOC threat analysis and IOC identification.

Applied knowledge of HTTP/HTTPS behaviour and malicious URL patterns — mirrors real SOC threat intelligence workflows.
Demonstrates practical IOC identification, anomaly detection, and false positive reduction at scale.

DistilBERTPythonNLPHugging FaceWeb SecurityIOC Analysis

Request Demo →

PROJECT_03

AWS Cloud Security Hardening

Designed and hardened AWS cloud infrastructure applying least-privilege IAM policies, network segmentation, and security group rules. Reduced attack surface and built incident response dashboards improving MTTD and MTTR at Tech Guild, London.

AWS IAMEC2S3VPCACSC Essential EightIncident Response

Request Case Study →

03 / Experience

Professional Background

Mar 2025 — Present

Melbourne Institute
of Technology

LiDAR & Sensor Security Researcher

📍 Melbourne, VIC

Developed end-to-end data pipelines with secure software engineering practices and robust input validation across complex sensor data streams.
Produced IEEE-formatted technical reports presenting findings to academic panels — directly transferable to SOC incident documentation.
Applied structured diagnostic methodologies to large-scale datasets, reinforcing systematic problem-solving applicable to threat hunting.

Jan 2022 — Oct 2022

Tech Guild
London, UK

Cloud & Security Engineer

📍 London, United Kingdom

Hardened AWS infrastructure (EC2, S3, IAM, VPC) with least-privilege policies, network segmentation, and security group rules.
Monitored cloud environments for security anomalies, triaging alerts and escalating incidents per defined IR workflows.
Diagnosed and resolved network security incidents including DNS misconfigurations, DHCP issues, and abnormal HTTP/HTTPS traffic.
Built incident response workflows and monitoring dashboards, measurably improving MTTD and MTTR.
Applied ACSC Essential Eight and NIST CSF controls to access management, patching, and network segmentation.