Facilitated and strengthened communication around security services across the security org, leading to a more cohesive working environment. Developed and implemented a standard for operational incident management, enhancing the teams response time and efficacy. Enhanced on-call alerting system and enforced standards, reducing false alerts by 40%. This resulted in 20% shorter response times and increased engineer satisfaction, improving overall incident resolution.Spearheaded documentation standardization across the team's services, providing guidance and foundation for iterative improvement. Collaborated with cross functional teams to determine gaps in process and user experience with various security platforms.Identified redundant or underutilized security solutions for a reduction in cost and user overhead.

Maintained, managed, and improved highly available endpoint security tools including EDR, AV, and web proxy as a platform owner. Lead migration of a managed security platform to a SaaS/Cloud solution involving 130k endpoints. Redesigned RBAC as-code for all platform users to adhere to the principle of least privilege.Cultivated strong vendor relationships by improving communication, resulting in faster issue resolution, and better alignment of feature request fulfilment. Implemented endpoint event streaming to centralized location for enhanced forensics.Designed and implemented service monitoring to increase reliability of the service and to identify issues ahead of business impact.Collaborated with global IT team to resolve service interruptions, resulting in 30% decrease in downtime and ensuring seamless service delivery, enhancing overall IT performance.Streamlined platform automations and integrations, reducing incident response time by 20% and enhancing overall SOC efficiency.

Endpoint Visibility:Deployed and administered Endpoint Detection and Response (EDR) on 4,000 assets.Team Organization:Deployed and administered Security Orchestration Automation and Response (SOAR) to better respond to alerts and detections.Created runbooks to operationalize InfoSec work for consistency in a team with different security backgrounds.Vulnerability Management:Integrated vuln mgmt platform with an enterprise password manager to rotate credentials required for scans.Created processes for vulnerability resolution.Administered threat intelligence database and downstream integrations (for detection and prevention).