PRAMOD RODGE // RECORD

2024-11 → ACTIVE

Amazure Technology Pvt Ltd

Triage a high-volume alert queue across endpoint and SIEM in a 24x7 multi-customer environment; cut false positives via refined Falcon detection policies.
Design and deploy Falcon Fusion SOAR playbooks automating triage, device isolation and analyst notification — directly lowering MTTR.
Administer and fine-tune CrowdStrike Falcon across an enterprise endpoint fleet: deployment, policy, troubleshooting.
Maintain a version-controlled GitHub repository of SIEM detection rules enforced across client tenants.
Design identity-based conditional access policies; run ITDR coverage.
Evaluate and onboard new products (WatchGuard, Kitecyber) into SOC workflows.
Author incident and risk reports; document timelines and root cause for audit.
Map threat intel and IOCs to MITRE ATT&CK to close coverage gaps.
Lab/POC evaluation of Falcon MCP Server for agent-assisted triage; currently building a SOCRadar-based MCP server to enrich SIEM alerts with threat-intelligence context for the SOC team.

2024-04 → 2024-10

TechDefenceLabs Solutions Ltd

Monitored and triaged alerts using Splunk and other SIEM tooling, correlating logs and network traffic to surface anomalies.
Escalated confirmed incidents with supporting documentation and evidence.
Contributed to detection and response playbooks automating recurring scenarios.

2023-12 → 2024-03

TechDefenceLabs Solutions Ltd

Ran vulnerability assessments across network and system infrastructure.
Supported penetration testing; documented exploitation paths for remediation priority.
Performed SIEM log analysis to correlate indicators and support investigations.

2022-11 → 2023-05

Parul University

Built and maintained networks, switches, routers and lab systems for security coursework.
Handled OS installation, configuration and environment upkeep.

RECORD & CREDENTIALS