Rani Patel
Surat
Summary
Results-driven SOC Analyst Level 2 with 8+ years of total IT and cybersecurity experience, including 4+ years in Security Operations Centers (SOC) across IT and OT/ICS environments. Proven expertise in 24/7 SOC monitoring, incident response, threat hunting, SIEM investigations, and OT security monitoring for critical infrastructure. Hands-on experience with Nozomi Networks, industrial protocols, and NIST / MITRE ATT&CK–aligned incident handling. Strong collaborator with IT, network, and OT teams, delivering actionable security insights, rapid containment, and detailed incident reporting in enterprise environments.
Overview
9
9
years of professional experience
1
1
Certification
Work History
SOC Analyst – Level 2
tata consultancy services
gandhinagar
02.2024 - Current
- Led Level 2 incident response activities including deep-dive investigations, containment, and remediation guidance for high and medium severity security incidents.
- Analyzed complex SIEM alerts across endpoint, network, cloud, and OT environments, reducing false positives by 30%+ through tuning and correlation improvements.
- Performed threat hunting using MITRE ATT&CK techniques to identify stealthy threats not detected by automated tools.
- Supported OT/ICS security operations by monitoring SCADA, PLCs, and RTUs using Nozomi Networks, identifying abnormal traffic and potential cyber-physical risks.
- Conducted root cause analysis (RCA) and authored detailed incident reports for management and compliance teams.
- Collaborated with IT, Network, and OT engineering teams to isolate threats and restore services with minimal operational impact.
SOC Analyst – Level 1
HCL
Delhi
03.2021 - 12.2023
- Monitored 24/7 SOC operations, triaging alerts from SIEM, EDR, IDS/IPS, firewalls, and endpoint security tools.
- Investigated phishing emails, malware alerts, brute-force attacks, and suspicious network activity.
- Escalated validated incidents to L2/L3 teams with clear technical context and evidence.
- Maintained accurate incident tickets, timelines, and documentation aligned with SOC SOPs.
- Successfully handled 1,000+ security alerts per month with high accuracy and minimal false escalation.
- Improved alert classification accuracy by 20% through continuous learning and rule familiarity.
Cybersecurity Operations Analyst / SOC Analyst
Cyber Security Umbrella
Surat
01.2019 - 02.2021
- Supported enterprise SOC monitoring and incident response across IT and OT environments.
- Performed vulnerability assessments, risk analysis, and remediation tracking.
- Assisted in SIEM use-case development and tuning to enhance detection coverage.
- Participated in incident simulations and tabletop exercises aligned with NIST standards.
- Hands-on experience securing industrial and petroleum environments.
- Monitoring OT networks using Nozomi Networks for asset discovery, traffic analysis, and anomaly detection.
- Understanding of ICS attack vectors, lateral movement, and cyber-physical risk scenarios.
- Worked closely with OT engineers to ensure security controls without impacting safety or availability.
IT Administrator
Transcodezy IT Solutions Pvt. Ltd.
Surat
07.2016 - 12.2018
- Managed Windows/Linux servers, Active Directory, patching, backups, and access controls.
- Supported network troubleshooting, firewall rule management, and system hardening.
- Built strong foundational knowledge of infrastructure, networking, and system security, enabling smooth transition into cybersecurity.
Education
Bachelor of Engineering -
RGPV
BHOPAL05-2014
Skills
- SOC Operations (L2) Alert Triage & Escalation Incident Response
- SIEM Monitoring & Log Analysis Correlation Rules Threat Hunting
- MITRE ATT&CK NIST Incident Handling Root Cause Analysis (RCA)
- Endpoint Security EDR / XDR Network Security Monitoring
- Firewall Analysis IDS / IPS Malware & Phishing Analysis
- Vulnerability Management Risk Assessment Threat Intelligence
- OT / ICS Security SCADA PLC RTU Industrial Cybersecurity
- Nozomi Networks OT Network Visibility Anomaly Detection
- Industrial Protocols: Modbus, DNP3, OPC
- Cloud & On-Prem Security Monitoring
- Incident Documentation SOC Reporting Stakeholder Communication
Certification
• Nozomi Networks OT/ICS Security training
• SIEM tools, EDR/XDR, firewalls, IDS/IPS
• Strong documentation, incident reporting, and stakeholder communication
• SIEM tools, EDR/XDR, firewalls, IDS/IPS
• Strong documentation, incident reporting, and stakeholder communication
Timeline
SOC Analyst – Level 2
tata consultancy services
02.2024 - Current
SOC Analyst – Level 1
HCL
03.2021 - 12.2023
Cybersecurity Operations Analyst / SOC Analyst
Cyber Security Umbrella
01.2019 - 02.2021
IT Administrator
Transcodezy IT Solutions Pvt. Ltd.
07.2016 - 12.2018
Bachelor of Engineering -
RGPV