Looking for a job

Ankit Mohanty

@ankitmohanty

Message

Security Operations Engineer at Encoura / Encora, tuning SIEM rules and reducing endpoint alert noise by 30–40%.

India

Message

What I'm looking for

I’m seeking a Senior SOC Analyst or Detection Engineering role in India where I can apply my cross-industry threat expertise within a high-impact global security team.

At Encoura / Encora, I lead escalated incident analysis and remediation across a multi-client environment. I manage CrowdStrike Falcon monitoring across 500+ endpoints and have adjusted detection logic to improve visibility and reduce noise by an estimated 30–40%.

I review SIEM correlation rules to reduce false positives while preserving detection coverage. I also operationalise threat intelligence from SANS Internet Storm Center and map security findings to MITRE ATT&CK techniques.

At Accenture | Security Practice, I analysed Microsoft Defender and Google Cloud Security Command Center alerts for an enterprise client, and investigated incidents from IDS, IPS, firewall, and proxy sources for a financial services client. I also analysed phishing emails and produced weekly trend reports.

Earlier, at Black Knight, CAMS, and Comodo, I worked on SOC incidents, IOC collection, and SIEM monitoring using tools including IBM QRadar, Splunk, and Comodo Cwatch. I’ve also developed SOC procedures adopted as standard practice and operationalised security analytics to help discover security and fraud events.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Operations Engineer

Current

Encora

Mar 2025 - Present (1 year 7 months)

Led escalated incident analysis and remediation across a multi-client environment via ServiceNow, ensuring SLA-compliant closure of P1/P2 security events. Managed CrowdStrike Falcon for enterprise endpoint monitoring across 500+ endpoints, reducing noise by an estimated 30-40%.

CrowdStrike Falcon Cloud Security ServiceNow SIEM SOAR Threat Intelligence MITRE ATT&CK GCP SCC Microsoft Defender MCAS ISC Secret Server

Senior Security Analyst

Accenture

Dec 2021 - Mar 2025 (3 years 3 months)

Analysed and investigated Microsoft Defender and Google Cloud Security Command Center alerts for a major enterprise client, triaging incidents and collaborating with resolver teams. Conducted phishing email analysis and managed incident analysis from IDS, IPS, Firewall, and Proxy sources via Symantec MxDR.

Microsoft Defender GCP SCC PhishMe Triage Symantec MxDR SIEM Incident Response SLA Management Reporting

Security Analyst

Black Knight

Sep 2020 - Dec 2021 (1 year 3 months)

Managed real-time log analysis from IDS, IPS, Firewall, and Proxy using IBM QRadar and Splunk, triaging incidents and raising ServiceNow tickets. Performed IOC collection and verification for Banking & Finance and Phishing-focused cyber threat campaigns.

IBM QRadar Splunk ServiceNow IOC Collection Guardicore IBM X Force Virus Total AWS Microsoft Defender ATP DLP

Security Analyst

CAMS

Mar 2020 - Sep 2020 (6 months)

Worked on incidents focused on tickets raised in internal tracker and analysed using IBM QRadar, triaging, investigating root cause, and resolving within SLA. Performed IOC collection for threat management focused on Banking & Finance and phishing domains.

IBM QRadar IOC Collection IBM X Force Virus Total Threat Assessment Vulnerability Assessment Rule Management

Associate Security Analyst

Comodo

Aug 2018 - Feb 2020 (1 year 6 months)

Conducted incident analysis on proprietary SIEM platform (Comodo Cwatch) maintaining 24/7 SOC coverage and meeting SLA targets consistently. Collected IOC data for Threat Intelligence from open-source platforms including Twitter/X and Any.run.

Comodo Cwatch SIEM IOC Collection Threat Intelligence IBM X Force Virus Total Ticket Escalation