Nitesh Rana

Detail-oriented SOC Analyst with 3+ years of hands-on experience monitoring, investigating, and documenting cybersecurity alerts and incidents. Skilled in LogRhythm and Splunk SIEM monitoring, endpoint and network log analysis, incident triage, vulnerability assessment, and ISO 27001 compliance. Familiar with Windows, Linux, TCP/IP, DNS, VPNs, EDR, IDS/IPS, and security investigation techniques.

Senior Analyst - Deloitte Touche Tohmatsu India LLP - Gurgaon

(2024-10)

• Prepared clear analytical reports and senior leadership briefings, communicating findings, recommendations, and decision-relevant insights.
• Partnered with cross-functional teams to investigate operational issues, improve processes, and drive timely resolution of complex problems.
• Mentored junior analysts and delivered training on data-analysis tools, strengthening consistency in analysis and reporting.
• Conducted research to identify emerging trends and opportunities, supporting proactive, data-driven decision-making.

SOC Analyst - IFTAS (Indian Financial Technology and Allied Services) - Mumbai

(2022-09 - 2023-11)

• Monitored round-the-clock security alerts, events, and logs through LogRhythm SIEM to identify potential threats and incidents.
• Correlated data from security log sources to support investigation, incident triage, and accurate escalation of complex cases.
• Analyzed suspicious activity including unauthorized access attempts, malware indicators, and potential security breaches; supported containment and resolution.
• Produced clear incidents, investigation, and audit documentation, including findings and remediation activities.
• Performed vulnerability assessments and penetration testing to identify weaknesses and recommend mitigation actions.
• Used automated scripts to streamline SOC workflows and enhance threat detection and response.
• Supported ISO 27001 internal audits, gap assessments, security-control reviews, and security-awareness initiatives.

Cyber Analyst - UnitedLex - Gurgaon

(2024-01 - 2024-03)

• Analyzed large datasets to identify and extract Personally Identifiable Information (PII) and Protected Health Information (PHI) for US-based clients, supporting data security and privacy requirements.
• Supported investigations into potential PII and PHI exposure, gathering relevant information and documenting findings for incident review.
• Collected and analyzed data from multiple sources to support investigation of workflows, evidence-based reporting, and compliance requirements.

Master of Computer Applications - Maharshi Dayanand University (2020 - 2022)

Bachelor of Science - Maharshi Dayanand University (2017 - 2020)

Master Diploma in Cybersecurity - Cybersecurity - CRAW Academy