Rony User

I’m a cybersecurity professional with 2+ years of hands-on experience in SOC operations, threat detection, and incident response. I’m CompTIA Security+ certified, and I focus on turning security data into faster, more accurate decisions.

In my SOC work, I run 24/7 monitoring with IBM QRadar, ingesting and correlating logs from firewalls, endpoints, and proxies to spot anomalies. I triage and escalate Level 1 incidents and reduce average response time by up to 20%, while improving detection quality through tailored correlation rules.

To keep alerts actionable, I develop and adjust QRadar correlation rules, dashboards, and reports—reducing false positives by 30%. I also automate containment and enrichment playbooks in IBM Resilient, using workflows fed by threat intelligence, whois, and geolocation.

Before and alongside SOC operations, I performed vulnerability assessments and ethical penetration testing for web applications. Using Burp Suite, OWASP ZAP, Nessus, Metasploit, and Nmap, I identified 12-15 vulnerabilities per assessment on average and produced 3-4 detailed technical and executive reports monthly.