- Built 15 to 20 sophisticated incident response campaigns, executed forensic analysis, informed root causes to contain security breaches, and minimized outages while cutting off further exploitation.- Proactively identified the presence of advanced threats within client environments using MISP, ELK, Snort, and Splunk.- Ensured the deployment and management of SIEM (Security Information Event Management) systems across massive corporate footprints, thus enabling real-time monitoring and a rapid response to organizational security events.- Conducted security assessments and tabletop exercises, providing clients with actionable recommendations to strengthen their security posture across cloud, network, and application layers.- Built and refined Security Operations Centre (SOC) workflows to work with industry standards and mitigation capabilities, resulting in better detection, response times, and threat reduction efficiency.- Collaborated effectively with a team of business executives and stakeholders on complicated cybersecurity incidents to help align technical security controls and organizational goals.

- Designed and deployed secure network architectures, including routers, switches, firewalls, and VPNs, improving connectivity, network security, and remote access for enterprise environments.- Notified Clients of True positive signal alerts, through templates & informed high-priority views by phone- Maintenance of firewall rules with source, destination IPs, ports, and transport protocols for improved network security.- Led the upgrade and migration of network systems, ensuring minimal downtime and seamless integration with existing infrastructure.- Created with the support of OEM Technical Assistance Centres (TAC) to address client-specific issues, from basic to intermediate customer support tickets and requests, assisting clients via email and phone when necessary.