Looking for a job

Ronit Rathod

@ronitrathod

SOC Lead at Zensar Technologies who fine-tuned 30+ Securonix detection rules, cutting false positives by ~40%.

At Zensar Technologies, I lead the SOC and handle high-severity incident triage, SIEM engineering, and cross-functional response. I fine-tuned 30+ Securonix rules and use cases, reducing false-positive alerts by about 40%.

I’ve also driven SOAR playbook improvements and incident response, with an estimated 30% reduction in MTTR. Across roles at LTIMindtree, Tata Communications, WNS Global Services, Happiest Minds Technologies, and other organizations, I’ve worked on SOC operations, threat detection, DLP, and incident response in financial, healthcare, and other regulated environments.

Experience

Work history, roles, and key accomplishments

Current

Technical Specialist – SOC Lead

Current

Zensar Technologies

Nov 2024 - Present (1 year 11 months)

Leading the Security Operations Center with end-to-end ownership of high-severity incident triage, SIEM engineering, and cross-functional response coordination across a multi-client environment. Engineered and fine-tuned 30+ correlation rules in Securonix, reducing false positives by ~40% and improving analyst throughput.

Securonix Splunk CrowdStrike Falcon Cloud Security Microsoft Defender ProofPoint Palo Alto Firewalls Microsoft Purview Netskope Intsights ServiceNow Jira SOAR Incident Response Threat Detection MITRE ATT&CK

Sr. Cyber Security Consultant

LTIMindtree

Mar 2022 - Nov 2024 (2 years 8 months)

Senior consultant driving SOC operations, SIEM engineering, and DLP governance for clients in Banking, Financial Services, and Insurance (BFSI) sectors. Designed and enforced DLP policies using Symantec DLP and leveraged Palo Alto XSOAR for security orchestration.

QRadar Securonix XSOAR XDR FireEye Symantec DLP CybleVision Intsights Nessus ISO 27001 NIST CSF

Sr. Security Engineer – Managed SOC

Tata Communications

Aug 2021 - Mar 2022 (7 months)

Managed SOC operations for enterprise clients, handling security incident monitoring, threat analysis, and response using LogRhythm SIEM and RespondX SOAR. Deployed and managed CrowdStrike and McAfee EPO for endpoint threat protection.

LogRhythm Crowdstrike McAfee EPO CybleVision IZOOlogic ManageEngine

Sr. Executive – SOC Operations

WNS Global Services

Nov 2020 - Aug 2021 (9 months)

Monitored and investigated security incidents using QRadar and ArcSight SIEM; managed endpoint threats via McAfee MVision and CrowdStrike. Operated UEBA tooling to detect anomalous user behaviour and potential insider threats.

QRadar ArcSight McAfee MVISION Crowdstrike Carbon Black Nessus Gurukul UEBA Cisco Email Gateway

Cyber Security Engineer II

Happiest Minds Technologies

Jan 2018 - Nov 2020 (2 years 10 months)

Delivered SOC monitoring and incident response services for AXIS Bank and Synovus Bank, two highly regulated financial institutions. Investigated and contained security incidents including phishing, account compromise, and network intrusion attempts.

SIEM Incident Response DLP Endpoint Security RBI Guidelines US Regulatory Compliance

Security / IT Engineer

ThyroCare Technologies Ltd

Jun 2017 - Jan 2018 (7 months)

Supported IT security and operations including endpoint management, incident monitoring, and helpdesk escalations within a healthcare technology environment.

Full Stack Developer

Prakar Group

Jan 2016 - May 2017 (1 year 4 months)

Developed and maintained web applications; transitioned to cybersecurity leveraging knowledge of application-layer vulnerabilities and secure coding practices.