- Conducted multi-team responses as Incident Commander, ensuring 100% containment and eradication of cyber incidents.- Utilized industry-standard tools like Splunk, Netography, Wiz, XDR, and AWS GuardDuty to respond to targeted incidents, containing affected systems and implementing preventative security measures to avoid recurrence.- Designed and implemented Splunk threat detection dashboards, alerts, and reports, reducing SOC analysis time by 30% through the use of advanced lookup enrichment and automation techniques.- Spearheaded the migration of 35+ SOAR playbooks, improving automated incident response efficiency across multiple security solutions.- Optimized Splunk search execution times by enhancing search performance and reduce false positive rates.- Continuously improved incident detection filters and dashboards, resulting in a reduction of global response times for cybersecurity incidents.- Developed strategic post-incident analysis reports to assess response performance, highlighting areas for improvement in future incidents.- Championed cloud security best practices in Kubernetes environments s to secure AWS EKS, ensuring compliance with company-wide security policies.- Engaged in regular threat-hunting exercises to proactively discover potential vulnerabilities and escalate them before exploitation.- Collaborated with international cybersecurity teams to align incident response strategies across multiple regions, ensuring seamless integration and consistent incident resolution across global operations.

- Developed and implemented a comprehensive cyber threat intelligence framework for the SOC, aggregating intelligence from various sources like CVEs, threat actors, and IOCs, reducing attack surfaces by 15%.- Led cross-functional cyber drills and tabletop exercises based on MITRE ATT&CK tactics, successfully identifying and addressing security gaps, and enhancing the organization's overall security posture.- Analyzed and triaged alerts, collecting forensic evidence, containing threats, and conducting thorough post-incident analysis, reducing false positive rates by 40% through effective whitelisting practices.- Engaged in 24/7 proactive monitoring and analysis of critical information systems and networks, mitigating potential threats and reducing the risk of system compromise.- Provided mentorship and training to over 5+ new hires, facilitating their seamless integration into SOC operations and strengthening the team’s overall capabilities.- Developed and maintained secure AWS sandbox environments for malware analysis, conducting both dynamic and static malware analysis to enhance detection and prevention of ransomware and zero-day threats.- Automated alert triage processes, reducing manual intervention and improving response times for high-priority incidents by 20%.- Initiated collaboration between SOC and Threat Intelligence teams, fostering an integrated approach to threat detection and incident response.- Participated in the design and implementation of playbooks for common incident scenarios, improving response times and ensuring consistent handling of repeated attack patterns.

- Conducted a thorough assessment of the organization's risk posture, assigning accurate risk values to identified threats and vulnerabilities, advising senior leadership on mitigating controls, and providing actionable recommendations for comprehensive risk management strategies.- Assisted in designing, drafting, and updating security policies and procedures, ensuring compliance with ISO 27001, NIST, and other relevant standards.- Supported the implementation of security control measures and conducted risk assessments to identify and mitigate potential vulnerabilities within the organization's IT infrastructure.- Collaborated with cross-functional teams to ensure that all security initiatives aligned with broader organizational objectives and compliance requirements.- Gained hands-on experience in threat modeling and vulnerability assessments, contributing to the development of an effective risk management framework for clients.