Pranit Dehankar
Cloud Security Engineer
About
Cloud Security Engineer with 4+ years of experience in cybersecurity, focused on securing AWS and Azure environments. Experienced in SOC operations on Microsoft Sentinel: triaging alerts, managing false positives, creating and managing incidents, building scheduled and Near-Real-Time (NRT) analytics rules, and threat hunting by creating new hunts and writing KQL queries, along with managing data connectors, log ingestion, and ingestion delay. Used Wiz (CSPM) and Qualys to identify and remediate cloud misconfigurations and vulnerabilities through CVE/CVSS-based risk prioritization, remediation tracking, and validation. Hands-on with IAM, RBAC, MFA, encryption, and access reviews to enforce least privilege, and with security monitoring through CloudWatch and Azure Defender for Cloud. Skilled in working with SOC, DevOps, infrastructure, and application teams on investigations and remediation, and in CI/CD security (SAST, DAST, SCA, secret scanning, security gates). Uses the MITRE ATT&CK framework and Cyber Kill Chain to contextualize threats.
Skills & Expertise (41)
Work Experience
Cloud & Security Engineer
Wipro
Sep 2021 - Present
Monitored, triaged, and investigated security alerts in Microsoft Sentinel, AWS CloudWatch, and GuardDuty, assessing severity and relevance to determine the appropriate response. Created and managed incidents in Microsoft Sentinel based on triaged alerts, tracking each through investigation and resolution. Built multiple analytics rules in Microsoft Sentinel, including scheduled and Near-Real-Time (NRT) rules, to detect threats and generate alerts and incidents. Managed false positives by reviewing and refining alerts and analytics rules to reduce alert noise and improve detection accuracy. Performed proactive threat hunting in Microsoft Sentinel by creating new hunts and writing new KQL queries under them to search for suspicious activity. Managed log ingestion, data connectors, and ingestion delay in Microsoft Sentinel to keep log collection and detection coverage reliable. Applied MITRE ATT&CK to contextualize alerts and understand attacker tactics and techniques during investigations. Collaborated with SOC, infrastructure, and application teams to investigate incidents and strengthen security controls. Recognized with the Victory League Award for secure cloud operations and incident resolution. Used Wiz and Azure Defender for Cloud to maintain visibility into cloud security posture across AWS and Azure, and coordinated remediation of identified misconfigurations and vulnerabilities. Implemented IAM, RBAC, and MFA across AWS and Azure to enforce least privilege and reduce unauthorized access risk. Applied encryption and conducted periodic access reviews to strengthen cloud security posture and maintain access hygiene. Ran vulnerability scanning and assessment with Qualys and Wiz across AWS and Azure, analyzing CVEs and applying CVSS scores to prioritize remediation by risk. Worked with infrastructure and application teams to track critical vulnerabilities through to closure and validation, reducing critical vulnerabilities. Operated a structured vulnerability management program (scanning, CVSS-based prioritization, remediation tracking), recognized with the Inspiring Performance Award for vulnerability remediation and risk reduction. Resolved a Cross-Site Scripting (XSS) vulnerability through root cause analysis and secure remediation, preventing script injection attacks against the application. Automated security reporting, log analysis, and compliance checks using Python and PowerShell, improving monitoring efficiency.
Education
M.Tech in Software Systems - Birla Institute of Technology and Science, Pilani
2022 - 2025 ยท Afghanistan
Bachelor of Computer Applications - Dr. Ambedkar College, Nagpur
2018 - 2021 ยท Afghanistan
Certifications
AWS Certified Cloud Practitioner
ยท 2024
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (41)
Click a skill to find developers with the same skill