Looking for a job

sonali lokhande

@sonalilokhande

Message

I investigate, contain, and improve enterprise security incidents across SIEM, EDR, network, and cloud environments.

India

Message

What I'm looking for

I'm looking to strengthen security operations through incident response, detection engineering, SIEM and EDR monitoring, cloud security, automation, and measurable improvements to detection and response.

I've supported security operations at Johnson Controls, monitoring and investigating high-volume SIEM alerts across EDR, firewall, IDS/IPS, IAM, and AWS log sources using Splunk and IBM QRadar.

I perform L2 incident investigations from alert validation and scoping through containment, eradication, recovery, root cause analysis, and post-incident documentation.

I improve detection coverage by tuning SIEM rules, onboarding and normalizing log sources, building playbooks, and supporting SOC automation and SOAR workflows. I also report incident trends, MTTD, MTTR, and defense effectiveness to stakeholders.

Previously at The Lead Stock, I monitored network traffic and security controls, responded to malware and unauthorized-access incidents, conducted vulnerability assessments and penetration testing, and supported ISO 27001-aligned controls and audits.

Experience

Work history, roles, and key accomplishments

Cyber Security AI Specialist

Johnson Controls

Jan 2022 - Jan 2026 (4 years)

Monitored, triaged, and investigated high-volume SIEM alerts using Splunk and IBM QRadar across EDR, firewall, IDS/IPS, IAM, and cloud log sources. Performed L2-level incident investigations and assisted in developing and tuning SIEM detection rules.

IT Network & Data Security Engineer

The Lead Stock

Apr 2020 - Apr 2022 (2 years)

Monitored network traffic, firewall logs, and IDS/IPS alerts to detect intrusions and suspicious activity. Responded to security incidents involving malware infections, unauthorized access, and data leakage risks.

Network Security Firewalls IDS IPS Incident Response Vulnerability Assessment Penetration Testing ISO 27001 Security Audits