Nov 2021 – Oct 2024 · 2 yrs 11 mos

• Spearheaded end-to-end implementation, testing, and support of various security services, enhancing operational readiness and resource proficiency.
• Led vulnerability management, patching, and remediation activities both internally and externally.
• Onboarded customers with advanced security solutions, incorporating IDS, IPS, SIEM, EDR, WAF, VM, and FIM technologies.
• Played key role in crafting and maintaining enterprise-wide security policies and guidelines.
• Successfully managed major security incidents, provided recommendations for process optimization, and conducted Proof of Concept testing on security tools.
• Proactively communicated critical vulnerabilities, driving remediation efforts across support services and customer environments.
• Served as crucial escalation point for security analysts during investigations, ensuring effective incident resolution and containment strategies.
• Engaged high-value clients to address security concerns, achieving strengthened customer relationships.
• Managed configuration changes, upgrades, and maintenance of existing security infrastructure.
• Led teams of up to five in developing and implementing security systems, resulting in 70% fewer threats.
• Applied leading theories and concepts to development, maintenance and implementation of information security standards, procedures, and guidelines

Nov 2020 – Nov 2021 · 1 yr

• Orchestrated incident response initiatives for major security incidents, collaborating across teams to develop threat detection and response use cases.
• Led Level 1 analyst team, overseeing escalations, training, and onboarding of new members.
• Provided security consultancy services to partners, clients, and vendors, enhancing IT security posture and architectural alignment.
• Ensured timely issue triage, resolution, and root cause analyses, adhering to service level agreements (SLAs).
• Conducted client engagement activities and assessed customer security postures.
• Analyzed malicious artifacts using sandbox technology, enabling effective response strategies.
• Gathered data from incidents that had been remedied for careful review and analysis to prevent future events.
• Handled high priority incidents with exceptional poise and composure, making quick decisions in effort to reduce overall impact.
• Developed highly effective incident response team and trained extensively in preparation for possible events

May 2017 – Nov 2020 · 3 yrs 6 mos

• Monitored security events in global SOC team, refining detection parameters and correlations for real-time incident identification.
• Conducted initial triage and incident response for alerts from IDS, EDR, and email gateways.
• Generated reports, maintained dashboards, and facilitated audits of security tools.
• Played pivotal role in managing access to managed security tools, both internally and externally.
• Helped team of eleven consultants and lead consultants optimize efficiency of current systems by conducting training sessions.

Sep 2014 – May 2017 · 2 yrs 8 mos · Gurgaon, Haryana, India · On-site

• Ensured critical IT infrastructure uptime by troubleshooting and resolving networking and server issues within SLAs.
• Managed resource allocation and coordinated escalations, contributing to root cause analyses and continuous improvement efforts.
• Managed over 30 outage escalations per day and increased team efficiency by 30%.
• Diagnosed and troubleshot hardware, software, and network issues
• Created user accounts and assigned permissions.
• Responded to customer inquiries and provided technical assistance over phone and in person.

Jul 2013 – Dec 2013 · 5 mos · Sarita Vihar, Delhi, India · On-site

• Provided technical support for printers, scanners, and Windows HP care applications.
• Prioritized customer satisfaction through efficient issue resolution and client interaction.
• Responded to support requests from end-users and patiently walked individuals through basic troubleshooting tasks