Dhritiman Banerjee

About Dhritiman Banerjee

Cybersecurity professional with 18+ years of experience architecting and operationalizing Azure security solutions, targeting Azure SecurityArchitect and Azure SOC Manager / SOC Lead. Skilled in Azure governance/landing zones, Zero Trust, identity andnetwork security, and SOC operations using Microsoft Sentinel (SIEM/SOAR), KQL, threat hunting, and incident response. Proven leaderimproving detection quality and SOC outcomes (MTTD/MTTR).Experienced cybersecurity professional with a proven track record of successfully designing, implementing, and managing robust securitysolutions in complex IT environments.Expertise in cloud security, particularly within Azure environments, encompassing Azure Defender, Azure Sentinel, Azure Purview, and AzureNetworking.Proven ability to assess client requirements, propose tailored cloud security solutions, and ensure alignment with sales and engineering teams, market trends, and compliance standards (HIPAA, GDPR, PCI DSS).Successfully led teams of security engineers, providing mentorship and guidance to junior team members, fostering professional growth and technical skill development.Adept at collaborating with stakeholders at all levels to achieve consensus on security initiatives and drive the adoption of best practices.Skilled in developing and delivering compelling presentations, demonstrations, and proof-of-concepts to showcase the value proposition of cloud security offerings.Possesses a strong understanding of data security principles and experience in developing and implementing data protection policies compliant with GDPR, CCPA, and HIPAA regulations.Proficient in architecting and implementing security principles for cloud-agnostic systems, leveraging multi-cloud strategies to enhance resilience and ensure high availability.

Experience

1. Technical Specialist

   Hexaware Technologies

   May 2025 — Present · IN

   Azure Security Architect | Azure SOC Manager / SOC Lead with 18+ years in IT, specializing in secure Azure architecture and SecOps. Designed and governed CAF-aligned Azure Landing Zones (Tier-0/Tier-1) with day-one guardrails across Azure Policy, RBAC, networking, and identity. Hardened Microsoft Entra ID using Conditional Access (MFA/device/location), PIM, break-glass accounts, and PAW for least privilege.Built segmented hub-and-spoke/vWAN architectures using Azure Firewall Premium, NSG/ASG micro-segmentation, UDRs, Private Endpoints, and WAF. Led Zscaler ZIA/ZPA rollout (Entra SAML/SCIM) with posture-driven access, SSL inspection controls, and Intune deployment across Windows/macOS/iOS/Android; engineered egress and private access via ZIA/ZPA Cloud Connector integrated with vWAN/UDRs and hybrid connectivity (IPsec/GRE/ExpressRoute).Operationalized Microsoft Defender (Defender for Cloud/Endpoint/Identity/O365/Cloud Apps) for CSPM/CWPP, Secure Score, JIT, and endpoint posture. Built and ran Microsoft Sentinel SIEM/SOAR: log onboarding (Azure/M365/Zscaler), KQL analytics & hunting, ASIM normalization, MITRE ATT & CK mapping, detection tuning, and automated response with Logic Apps playbooks. Drive measurable SOC outcomes via SOC KPIs, PIR/RCA, and continuous improvement to reduce false positives and improve MTTD/MTTR.Enable secure delivery with policy-as-code and DevSecOps (Bicep/Terraform guardrails, scanning, CI/CD gates), perform risk assessments/threat modeling (STRIDE), run tabletop/game-day exercises, and align governance to ISO/IEC 27001:2022 and India’s DPDP Act, 2023.