# Dhruv Sawhney

Dhruv Sawhney is a remote worker on Himalayas, Director – Cloud Engineering at Ankura Consulting Group, based in India.

Source: https://himalayas.app/@dhruvsawhney

```text
SOC operations leader at ANKURA CONSULTING GROUP who manages cloud-security delivery and strengthens Microsoft Sentinel detection coverage.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | India |
| Authorized to work in | India |
| Salary expectations | 222k+ INR |
| Job categories | SOC Operations Leadership, Cloud Security Engineer, Security Operations Manager, Security Engineering Manager |
| Skills | SOC Operations, Incident Response, Microsoft Sentinel, Architecture SIEM, Detection Engineering, Threat Hunting, SIEM Integration, Detection Use Case Development, Cloud Security Operations, SOC Team Leadership, Security Automation, Azure Logic Apps, Sentinel Playbooks, Defender XDR, Purview DLP |
| LinkedIn | https://linkedin.com/in/dhruv-sawhney-74234411 |

## About

```text
At ANKURA CONSULTING GROUP, I lead SOC and cloud-security delivery across an MSSP/client environment, managing SOC and engineering teams. I strengthen Microsoft Sentinel coverage by integrating firewall, proxy, DNS, and Windows telemetry.

I build and maintain detection-use-case libraries aligned with available log sources, threats, and client requirements. I also reduce manual work through Azure Logic Apps and workflow integrations with ServiceNow and Jira.

At DELOITTE, I led cloud SOC operations and security-service delivery, managed a SOC team, and operationalized Microsoft Sentinel detection capabilities, threat hunting, SOPs, and playbooks. I automated reporting and repetitive activities using Azure Automation and Microsoft Sentinel Playbooks.

Earlier, I handled L2 SOC operations at DELOITTE and security operations at HCL TECHNOLOGIES, including escalated-event analysis, incident response, threat hunting, and custom detection rules. I hold Microsoft Azure AZ-900 and AZ-104 certifications, and am pursuing CISM.
```

## Experience

### Director – Cloud Engineering (current)

[Ankura Consulting Group](https://himalayas.app/companies/ankura-consulting). Jun 2024 - Present

```text
Led SOC and cloud-security delivery for an MSSP/client environment averaging 20–30 clients, managing approximately 15 SOC and 6–10 engineering team members. Strengthened Microsoft Sentinel monitoring coverage and built detection-use-case libraries.
```

Skills: Microsoft-Sentinel, Azure-Logic-Apps, ServiceNow, Jira, Purview-DLP, Threat-Hunting, SIEM-Cost-Optimization, Detection-Engineering, Cloud-Security, Incident-Management

### Assistant Manager – Cloud Security

[Deloitte](https://himalayas.app/companies/deloitte-ireland). Jun 2021 - Jun 2024

```text
Led cloud SOC operations and end-to-end security-service delivery for an MSSP/client environment averaging 20–30 clients. Built and managed a cloud-security consulting team of approximately 20 SOC members, improving SIEM onboarding and operationalizing Microsoft Sentinel detection capabilities.
```

Skills: Microsoft-Sentinel, Azure-Automation, Sentinel-Playbooks, Architecture-SIEM, Threat-Hunting, SOC-Team-Leadership, Client-Reporting, Endpoint-Security

### Consultant – Cybersecurity / L2 SOC

[Deloitte](https://himalayas.app/companies/deloitte-ireland). Apr 2020 - Jun 2021

```text
Led L2 SOC operations across ArcSight, QRadar, and Microsoft Sentinel, providing technical guidance and advanced analysis for escalated security events. Developed SOC playbooks, SOPs, detection rules, and conducted proactive threat hunting.
```

Skills: ArcSight, QRadar, Microsoft-Sentinel, SOC-Operations, Incident-Response, Threat-Hunting, Root-Cause-Analysis, Playbooks, SOPs, Detection-Rule-Development

### Senior Analyst

[HCL Technologies](https://himalayas.app/companies/hcltech). Jun 2019 - Apr 2020

```text
Advanced to L2 security operations, resolving incidents, performing root cause analysis, and managing escalated client communications. Supported enterprise SIEM operations with ArcSight and LogRhythm, developing custom detection queries and security rules.
```

Skills: ArcSight, LogRhythm, SIEM, Incident-Response, Root-Cause-Analysis, Detection-Queries, Security-Policies, Client-Reporting

### Graduate Engineer Trainee (GET)

[HCL Technologies](https://himalayas.app/companies/hcltech). Oct 2017 - Jun 2019

```text
Monitored and triaged security alerts across enterprise ArcSight and LogRhythm SIEM platforms. Supported incident response, security analysis, and client reporting, and created custom dashboards for operational efficiency.
```

Skills: ArcSight, LogRhythm, SIEM, Security-Monitoring, Incident-Response, Threat-Analysis, Dashboard-Creation, Client-Reporting

## Education

### ABES Institute of Technology

Bachelor of Technology, Electronics & Communication Engineering. 2013 - 2017

```text
Pursued a Bachelor of Technology in Electronics & Communication Engineering from 2013 to 2017.
```

## Tech stack

- Microsoft Azure
- Jira
- Redmine
- CrowdStrike
- ArcSight
- ServiceNow
- Azure Logic Apps
- SentinelOne
- Proofpoint

To contact Dhruv, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Abhinay Yadav](https://himalayas.app/@abhinayyadav): Security Delivery Lead, Accenture
- [Shubhanshu Saini](https://himalayas.app/@shubhanshusaini1): CyberSecurity Team Lead, KPMG India
- [Piyush Benia](https://himalayas.app/@piyushbenia): Detection Specialist, Cumulus Systems Pvt Ltd
- [Kamalapur Supriya](https://himalayas.app/@kamalapursupriya): Security Operations Analyst – L2, Accenture Pvt. Ltd.
- [Indranil Bhowmik](https://himalayas.app/@indranilbhowmik): Security Delivery Associate Manager, Accenture
- [Anmol Jairath](https://himalayas.app/@anmoljairath): Security Delivery Associate, Accenture
- [raja sekhar](https://himalayas.app/@rajasekhar1): Senior Security Engineer, Cyara Operations Pvt. Ltd.
- [Sachin Bisht](https://himalayas.app/@sachinbisht1): Associate, Managed Detection & Response (MDR), Ankura Consulting India Pvt. Ltd.
- [Satyasai Ray](https://himalayas.app/@satyasairay): Senior Security Analyst, Oracle
- [Swapnil Jatrate](https://himalayas.app/@swapniljatrate): Security Delivery Analyst, Accenture