Sonali Rathi

About Sonali Rathi

Competent Security Analyst with nearly 3.5+ years of experience in Information Technology, specializing in cybersecurity and network protection within the IT services sector. Currently engaged at TCS, I focus on continuous monitoring and evaluation of security events to identify potential threats.Cultivated a diverse skill set in security operations, incident management, and threat intelligence analysis, enabling me to address evolving cybersecurity challenges effectively. My efforts have led to significant enhancements in operational efficiency through optimized techniques, resulting in improved incident response times.I have established exceptional leadership and communication skills, fostering collaboration among diverse teams for effective incident resolution. I play a key role in integrating advanced security tools and executing comprehensive security assessments, which enhance threat detection capabilities and mitigate risks.My experience in Information Security includes a strong focus on security operations and incident management, utilizing SIEM tools such as Sentinel and Splunk within a 24/7 Security Operations Center (SOC) environment. I am proficient in log analysis and alert triage with Endpoint Detection and Response (EDR) tools alongside troubleshooting and responding to infrastructure threats. My dedication to maintaining high security standards ensures that I contribute to the organization\'s overall safety and resilience against cyber threats.And I am ensuring that I can compete effectively with candidates who have three years of experience. I\'m eager to contribute to dynamic teams and tackle new security threats.

Experience

1. Soc Analyst

   Tata Consultancy Services

   Sep 2021 — Present · IN

   Engaging in real-time monitoring of security events, analyzing logs from various security appliances to identify potential threats and vulnerabilities? Compiling daily compliance reports for desktops, laptops, and servers to ensure adherence to security protocols and standards? Managing incidents and security alerts triggered in EDR tools, coordinating with relevant teams for effective resolution? Facilitating user access requests for USB devices and Bluetooth, verifying security controls and compliance measures? Supervising day-to-day tasks such as IOC blocking, exclusions, and custom rule management to enhance endpoint security? Communicating directly with customers during high-priority incidents, providing guidance and support in mitigating security threats.

Education

• Technocrats Institute of Technology

  Bachelor of Technology, Information Technology

  2017 — 2021