Raju Sangani

Cyber Security Operations Analyst L2 with 2+ years of hands-on SOC experience and 9+ years of combined IT and security experience, including six years in enterprise network engineering. Skilled in SIEM monitoring, alert triage, endpoint and network investigation, threat hunting, incident response, root cause analysis, and MITRE ATT&CK mapping across multi-client environments. Experienced with incident documentation, SLA-driven escalation, correlation-rule tuning, vulnerability remediation support, and security automation using Python and Cortex XSOAR.

Certified Ethical

Hacker (CEH).

SOC Analyst L2 / Cybersecurity Engineer at ESDS Software Solutions Limited (2023-07 – Present)

24x7 Multi-Client MSSP

• Monitor security events and alerts across endpoint, network, and email channels using SIEM tools (Microsoft Sentinel, Splunk, IBM QRadar, ArcSight) and EDR solutions (Microsoft Defender for Endpoint, CrowdStrike Falcon) in a 24x7 SOC, supporting security operations across Windows systems and enterprise environments.
• Investigate security events, alerts, and suspicious activity through log, endpoint, authentication, and user activity analysis; perform root cause analysis, respond to incidents, and ensure timely resolution within defined SLAs, escalating complex or non-standard cases to senior analysts and shift leads per established playbooks.
• Manage incidents through their full lifecycle with security event investigation, containment, eradication, recovery, and detailed documentation; coordinate response activities with relevant teams and maintain 95%+ SLA compliance on P1/P2 incidents.
• Analyze cyber threats, threat actors, Indicators of Compromise (IOC), and Tactics, Techniques and Procedures (TTP), mapping detections to the MITRE ATT&CK framework; tune 150+ SIEM correlation rules and detection use cases, reducing false positives by 35%.
• Support threat detection and vulnerability assessment activities across a multi-client endpoint estate of 2,000+ endpoints via EDR/XDR, maintaining remediation-tracking metrics for internal and client reporting.
• Contribute to security automation and orchestration via Cortex XSOAR playbooks (Python, PowerShell, Bash) for phishing investigation, enrichment, and threat-hunting workflows - reducing manual triage effort by 60% and cutting threat dwell time from ~12 hours to under 3 hours.
• Assist with security awareness activities and provide guidance on cyber security best practices as part of ongoing compliance and audit-documentation work.

Network Engineer at Reliance Industries Limited (2017-06 – 2023-06)

Upstream Oil & Gas / OT-ICS Environment

• Managed Palo Alto and FortGate firewalls and VPNs (IPSec/SSL) across a regulated critical-infrastructure environment, designing network segmentation and secure remote access between IT and OT zones while applying network, firewall, and authentication security fundamentals.
• Reduced unauthorized access attempts by 40% through improved firewall policy, segmentation, and access-control administration, supporting the organisation's broader security posture.
• Supported vulnerability identification, security hardening, and remediation coordination, including audit-support documentation and cyber security standards compliance.

B.Tech in Computer Science Engineering – Aditya University (2011)