Oct 2023 – Present · 2 yrs 6 mos · Gurugram, Haryana, India

• Manage end-to-end Security Operations covering SIEM, XDR, Antivirus, DLP, Email Security, Container Security, and Network Security controls, ensuring continuous monitoring and threat response.
• Perform real-time threat detection, investigation, and incident response, handling activities across L1 triage, L2 analysis, and escalation decisions to contain and remediate security incidents.
• Design, implement, and fine-tune security policies, detection rules, and response playbooks across multiple security platforms based on evolving threat landscapes and business requirements.
• Lead IOC management and threat containment, including blocking malicious URLs, IP addresses, domains, and file hashes across security tools and infrastructure.
• Investigate and respond to phishing and email-based attacks, performing deep analysis and implementing preventive controls to reduce repeat incidents.
• Implement and manage Data Protection controls, including Encryption and DLP, to safeguard sensitive organizational data and support compliance requirements.
• Oversee patch management activities, coordinating remediation efforts to minimize security risks across servers, endpoints, and applications.
• Conduct continuous security posture assessments by reviewing raw security logs, evaluating control effectiveness, and identifying improvement areas.
• Act as the primary point of contact for security vendors, managing tool integrations and Proof of Concept (POC) evaluations to assess and onboard new security solutions.
• Collaborate with IT, DevOps, and leadership teams to align security operations with business objectives, risk tolerance, and operational priorities.