👉 Detection, response and automation👉 IT & product security

💡 Contributed to the development of security monitoring and detection capabilities for the IR team by assessing threat surfaces of IT systems, setting monitoring priority, and helped with building detection use-cases. All of which significantly improved the scope of monitoring and incident preparedness as well as reduced the MTTD KPI.💡 Designed, architected, and deployed automated workflows for the IR team by utilizing the APIs of the deployed security tools and built a Slack app tobegin incident response process, resulting in a much better reaction time (MTTR) KPI.💡 Performed security assessments of user endpoint devices, VDIs and servers to detect and remediate security gaps, improving the overall securityposture of the organization.💡 Involved in offering strategic inputs to the IT teams in order to architect and build a hybrid cloud infrastructure based on a security-by-design principle

💡 Responsible for leading the automation and orchestration projects within the SOC team with the goal of minimizing alert fatigue and boosting response time to effectively resist internal and external security risks.💡 Developed a personal threat intel feed to stay informed of potential attacks ahead of time for enhanced monitoring.💡 Worked on a few high-severity security incidents as part of the global Incident Response team, contributing with high quality inputs that resulted in impacting the investigation and response process positively.💡 Mentored junior security analysts in improving their technical capabilities and decision-making in respect to triaging security alerts, as well as improving their first responder readiness.

💡 Served as a tier II engineer on the SOC team, responsible for monitoring, triaging, and responding to security alerts in order to maintain consistent detection and response KPIs.💡 Carried out a project to develop, test, and maintain Phantom (SOAR) playbooks, programmed in Python. The project's completion resulted in reduction of manpower for handling security alerts, as well as a 3x improvement in response times in some circumstances.💡 Regularly hunted for malware and reverse engineered them to extract IOCs for blocking across the internal network as well as to gain insights about threat actors.💡 Frequently developed detection use cases based on active incidents, emerging threats, and the findings of threat hunting.

💡 Responsible for assessing the breadth and severity of vulnerabilities detected by a scanner and reporting them to the asset owners for patching as part of the Vulnerability Management team.💡 Built a web app that allowed me to keep track of found and reported vulnerabilities and to automatically send emails to the asset owners for patching. The app also included a feature to send automatic reminder emails. This work reduced manual labor and aided in the efficient management of vulnerabilities.💡 Identified and reported a session hijacking vulnerability in an authentication system. I received an internal award for this discovery. 💡 I shadowed senior engineers and learned about the enterprise network, incident response processes, and day-to-day security operations that helped me develop a strong foundation for the role of a SOC analyst.

💡 As a freelance web developer, I helped local business owners and individuals create their online identities and online stores with security-by-design principle.