Open to opportunities

Gaurav Sharma

@gauravsharma20

Message

Security operations and XSIAM/XSOAR specialist building SIEM detection engineering and automation workflows.

India

Message

What I'm looking for

I’m looking to keep delivering XSIAM/XSOAR-based SIEM engineering, detection engineering, and security automation across complex enterprise environments—especially banking—where I can build scalable onboarding pipelines and playbooks.

I deliver XSIAM-based security solutions across multiple leading banking clients, focusing on end-to-end security data onboarding: log ingestion, parsing, normalization, field mapping, and data modeling in Palo Alto Networks XSIAM.

At Trantor Inc., I built and customized Python-based integrations and REST API workflows to automate data ingestion, enrichment, and security operations across security platforms, and I enhanced XSOAR/XSIAM playbooks to reduce manual effort and improve incident response efficiency by 50%.

Earlier at HCLTech and IBM, I administered SIEM platforms, engineered correlation rules and detection engineering workflows, and ran Level 2 SOC operations for offense investigation, threat hunting, monitoring, escalation, and root-cause analysis—leading teams of 7–15+ analysts and reducing false positives and security incidents through automation and tuning.

Experience

Work history, roles, and key accomplishments

Current

Associate Tech Lead

Current

Trantor Inc.

Jan 2025 - Present (1 year 6 months)

Designed and implemented end-to-end security data onboarding for enterprise customers using Palo Alto Networks XSIAM. Developed Python-based integrations and REST API workflows to automate data ingestion and enrichment.

XSOAR Python REST APIs Security Automation Data On Boarding Data Ingestion Data Modeling EDR Cloud Platforms Vulnerability Management Ticketing Systems AI assisted Development

Senior Information Security Specialist Engineer

HCLTech

Aug 2019 - Jan 2025 (5 years 5 months)

Administered enterprise SIEM platforms with expertise in log source integration, correlation rule development, and automated response workflows. Designed advanced correlation rules and playbooks, achieving 30-40% reduction in security incidents.

SIEM Administration Correlation Rules Data Normalization Automated Responses SOC Operations Threat Hunting Incident Response DDoS Mitigation Malware Analysis

Information Security Specialist Engineer

IBM

Mar 2015 - Jun 2019 (4 years 3 months)

Led SIEM offense investigations and real-time log troubleshooting to enhance threat detection. Developed correlation rules and detection workflows, reducing false positives by 40%.

SIEM Correlation Rules Log Analysis Detection Engineering SOC Operations Incident Response