ROHIT SONAWANE

Managing end-to-end SIEM implementations, including log onboarding, parsing, rule creation, and optimization to enhance threat detection and response. Leading a SOC team of 15+ analysts, driving operational excellence and ensuring adherence to cybersecurity best practices and SLAs. Leveraging SOAR platforms to automate incident workflows, streamline alert triaging, and significantly reduce dependency on manual efforts. Spearheading compliance initiatives by aligning security operations with regulatory standards such as ISO 27001, GDPR, and NIST. Delivering training and mentoring to SOC analysts, fostering skill development and improving team efficiency. Collaborating with stakeholders to assess security gaps, propose improvements, and implement advanced cybersecurity solutions.

Spearhead the management of multiple customers in the Middle East through collaboration with MSSP partners, demonstrating expertise in QRadar-SIEM and ArcSight. Drive operational excellence by overseeing Presales and operations for new clients, effectively presenting Synax solutions to clients and partners, contributing to a growing portfolio. Resolve client issues, gather feedback, and provide comprehensive reporting, fostering strong client relationships that have resulted in increased satisfaction and retention rates.

Led a Shared SOC, managing clients across India and the Middle East, achieving remarkable success in end-to-end deployment of SIEMs (Stellar Cyber, QRadar, ArcSight) for diverse industries, including BFSI, Pharma, and manufacturing. Spearheaded integration of Multiple Log Sources, troubleshooting log stoppages, and creating baselines, contributing to a robust security infrastructure and seamless operations. Innovated by developing new Use Cases, enhancing anomaly detection and log analysis, receiving client appreciation for delivering solutions within stringent timeframes.

Led SOC teams and successfully deployed QRadar SIEM, integrating diverse log sources (Windows, Linux, Bluecoat SG proxy, Symantec endpoint, O365), significantly enhancing threat detection capabilities. Proactively identified root causes of incidents, presenting weekly insights to management, resulting in timely incident resolution and a proactive security posture. Resolved technical issues, managed teams, and handled day-to-day running of Symantec DLP and VA activities, ensuring high levels of productivity and progression.

Headed the Analyst and Sr Analyst Monitoring team, implementing incident monitoring and reporting on multiple SIEMs (ArcSight, AlienVault) in MSSP and captive environments. Spearheaded Log Source Integration, including OS, networking, and network security devices, contributing to a more comprehensive and efficient monitoring system. Achieved significant success in RSA fraud monitoring, taking down phishing sites and blocking malicious URLs, resulting in enhanced cybersecurity for clients.

Configure Switches and Routers , Troubleshooting. MPLS, Firewall, WLAN,

HSC