- Oversaw the handling of internal and external Requests for Information (RFIs) and collection support tasks using established workflow processes.- Stayed abreast of threat actor tactics, techniques, and procedures to effectively evaluate the credibility of operators, toolsets, and services.- Supervised the Security Operation Center (SOC) team, ensuring swift investigation and resolution of incidents.- Managed responsibilities in a 24/7 Security Operation Center, including the oversight of SIEM/SOC installation, configuration, and maintenance, and addressing escalations across diverse industries.- Improved defense mechanisms, data gathering, and corrective actions through strategic automation.- Developed and implemented a comprehensive incident response infrastructure, encompassing plans, defined roles, training, communications, and management oversight.- Led initiatives to proactively prevent, detect, and respond to the installation, spread, and execution of malicious code across various enterprise points.- Conducted thorough analysis of dark web activities to pinpoint potential threats and vulnerabilities relevant to the organization's security landscape.- Produced detailed digital forensics reports to support incident response efforts and contribute to continuous security enhancement.- Authored and updated incident response playbooks, outlining step-by-step procedures and protocols for addressing diverse security incidents.- Established, implemented, and actively managed security configurations for server resources.

Blockchain in Healthcare sector