Rahul Ganta

• To secure a dynamic position as a Security Engineer in a professionally challenging environment, contributing to the enhancement of security technologies and delivering effective solutions for enterprise IT security operations.
• 7+ years of experience in Information Security, working as a Security Analyst and Consultant. Expertise in SIEM tools (IBM QRadar, Splunk), SOAR platforms (Resilient, CP4S), and Azure Log Analytics. Proficient in real-time alert monitoring, incident response, phishing analysis, dashboard/report generation, and use case development. Hands-on experience with security tools like Qualys, Nessus, Nmap, Wireshark, and familiarity with MITRE ATT&CK. Effective communicator with experience in client engagement, weekly/monthly reporting, and team leadership.
• Experienced with identifying and mitigating security threats through comprehensive assessments. Utilizes advanced techniques to ensure protective measures are effective and responsive to changing environments. Strong understanding of security protocol development and implementation, ensuring organizational safety and compliance.
• Security professional prepared for role, bringing extensive experience in conducting thorough security assessments and implementing protective measures. Known for collaborative efforts and consistently achieving results, adapting to evolving security needs. Skilled in risk management, incident response, and maintaining high standards of operational security.
• Professional in security consultation with proven track record in risk assessment, threat analysis, and implementation of robust security protocols. Strong focus on team collaboration, ensuring seamless integration with existing systems while adapting to changing needs. Known for analytical thinking, strategic planning, and effective communication, driving impactful results in high-stakes environments. Skilled in cybersecurity, physical security measures, and compliance with industry standards.
• Self-assured individual considered well-trained Security Consultant with more than 4 years of experience. Flexible and poised promoting well-developed skills in vulnerability scanning and data security.
• Professional Security Specialist with strong focus on risk assessment, threat analysis, and emergency response. Known for fostering team collaboration and adapting to changing needs to achieve objectives. Skilled in surveillance systems, access control, and incident management. Reliable and results-driven with proactive approach to security challenges.
• Experienced with risk assessment, access control, and surveillance systems. Utilizes comprehensive knowledge to implement effective security measures and protocols. Strong understanding of emergency response procedures and compliance with security regulations.

• Worked in MSSP model supporting 20+ clients from various domains: Retail, Banking, Healthcare, Aviation, and Logistics. Responsibilities included log analysis, use case development, report generation, and daily SOC operations

• Translating customer’s information security requirements into respective technology solution;
steering security architecture review and assessments for business and technology change requests
• Providing critical observations & mitigation actions in terms of Vulnerability Management
• Ascertaining critical or major incidents and providing solution & root cause for the critical issues and
taking proactive measures to reduce the major incidents
• Cooperating with onsite/ offsite teams for business requirements gathering, conducting analysis and
finalizing techno‐functional specifications and service delivery
• Delivering suggestions to higher management regarding IT security policy improvement
• Functioning on Incidents

• Automated Alert Triage: Designed and implemented SOAR playbooks (using IBM Resilient & Azure Logic Apps) that reduced analyst triage time by 40% across phishing and malware alerts.
• Optimized Use Case Coverage: Created and fine-tuned 25+ SIEM correlation rules mapped to the MITRE ATT&CK framework, improving threat detection accuracy and reducing false positives by 30%.
• Cross-Platform Log Integration: Successfully integrated 20+ log sources including CrowdStrike, Palo Alto, Zscaler, and MCAS into QRadar and Sentinel, ensuring centralized visibility and compliance logging.
• Client-Specific Dashboarding: Developed real-time dashboards and executive reports in Splunk and Sentinel Workbooks tailored for banking, healthcare, and retail clients.
• SOC Process Improvement: Played a key role in transitioning the SOC team to a 24/7 model, establishing updated SOPs and knowledge transfer materials for new analysts.
• Security Incident Response: Led investigation and containment efforts in multiple phishing and malware incidents, including one high-severity case that prevented potential data exfiltration from a C2 domain.
• MSSP Multi-Tenant Support: Managed security operations for 20+ clients simultaneously in a Managed Security Services Provider (MSSP) model, adapting rules and alert tuning per client needs.

• Microsoft Certified Security Operations Analyst Associate
• Recognition for outstanding performance
  and lasting contribution in 2023
• Recognition for outstanding performance and lasting contribution in 2024
• Languages Known: English, Hindi, Telugu
• Projects & Initiatives:
  Led use case development and fine-tuning for 20+ clients in an MSSP model across banking, healthcare, and retail sectors.
  Designed and implemented automation workflows using SOAR (IBM Resilient and Azure Logic Apps) to reduce alert triage time.
  Created technical documentation, SOPs, and knowledge transfer decks for junior SOC analysts.
• Technical Training & Mentoring:
  Regularly conduct knowledge-sharing sessions for junior team members on SIEM, phishing analysis, and rule tuning.
  Developed internal guides on log onboarding, offense tuning, and KQL/SPL query writing.
• Certifications: Certified Ethical Hacker (CEH) – EC-Council ( Expired )
• Classroom Training in SIEM & Security Tools (QRadar, Splunk, Azure Sentinel)
  

Certified Security Operations Analyst, Microsoft - Marc17, 2024 - March 17, 2025

• Cybersecurity lab exercises (TryHackMe, Blue Team Labs)
• Open-source tool experimentation (e.g., Zeek, Velociraptor, Sysmon)
• Blogging about phishing detection and SIEM use cases (personal learning notes)
• Cricket and trekking for mental fitness and team building
• Tinkering WIth Electronic Gadgets, Singing Gardening

• Date of Birth: 11/19/93
• Marital Status: Married