Headline

Security Engineer, led Security Operation Center, Incident Response, Corporate security, ISO27001 audit, SOC2 & NIST CSF2.0 compliance, custom AI solutioning and IT Administrations

About

I create a forward-thinking environment with responsible entrepreneurship to make a business-full impact in cybersecurity. I'm currently a Security Engineer - SOC & GRC with a Master of Science in Cyber Security and 3+ years leading SOC operations and security governance for clients across EdTech, supply chain and security services in North America and Europe regions. Built and matured a founding SOC on detection engineering, incident response SOPs, XDR-driven Tier-1 automation and AI-powered workflows sustaining 99.9% SLA across 12.9M+ daily events while reducing MTTR. Led end to end audit readiness for SOC 2, NIST AI RMF, NIST CSF 2.0, ISO 27001 frameworks and enterprise identity governance, turning technical security operations into measurable business and compliance outcomes. Key Achievements & Impact: • Led founding SOC operations, owning alert triage, investigation workflows, escalation procedures, shift handoffs, case documentation and quality assurance across security monitoring. • Maintained 99.9% SLA compliance while reducing MTTR by automating repetitive Tier-1 investigation and enrichment tasks. • Developed 17 custom detections and operational dashboards aligned to MITRE ATT&CK techniques, improving alert fidelity and reducing noise for analyst triage. • Led endpoint compliance standardization across 700 devices using Intune, Kandji and Kolide, aligning 39 internal policies to NIST and CIS benchmarks. Implemented device trust checks and remediation workflows that improved access control. • Onboarded 8 L1 analysts within a quarter, creating structured onboarding programs, competency assessments and operational training resulted seamless 24/7 operations. • Led SOC 2 & ISO27001 readiness program using Vanta, including control mapping, gap remediation, policy updates, evidence validation, stakeholder coordination and mock audit execution, resulting in improved audit preparedness ahead of CPA attestation. • Saved ~$84K/yr for the client by proposing an efficient BYOD DLP solution instead of costly Virtual Desktop Infrastructure, while balancing data protection, privacy requirements, user experience and operational overhead. • Building an AI-driven "Access Review as a Service" solution to bridge manual labour gaps between IdPs, applications and governance platforms. • Established a Security Awareness Training program using open-source resources and public threat data to improve the internal security culture. Tools: Okta, Microsoft Entra ID, Intune, Iru-Kandji, Sentinel One, Vanta, PagerDuty, Kolide, pfSense, Stellar Cyber XDR

Location

Bengaluru

AI stack

claude

deepseek

grok

kimi

openai

Qwen

Work experience

Security Engineer at Sennovate Inc., Dec 2023 - Present · 2 y 10 mo, Coimbatore, Key Achievements & Impact: • Maintained 99.9% SLA compliance while reducing MTTR by automating repetitive Tier-1 investigation and enrichment tasks. • Developed 17 custom detections and operational dashboards aligned to MITRE ATT&CK techniques, improving alert fidelity and reducing noise for analyst triage. • Led endpoint compliance standardization across 700 devices using Intune, Kandji and Kolide, aligning 39 internal policies to NIST and CIS benchmarks. Implemented device trust checks and remediation workflows that improved access control. • Onboarded 8 L1 analysts within a quarter, creating structured onboarding programs, competency assessments and operational training resulted seamless 24/7 operations. • Led SOC 2 & ISO27001 readiness program using Vanta, including control mapping, gap remediation, policy updates, evidence validation, stakeholder coordination and mock audit execution, resulting in improved audit preparedness ahead of CPA attestation. • Saved ~$84K/yr for the client by proposing an efficient BYOD DLP solution instead of costly Virtual Desktop Infrastructure, while balancing data protection, privacy requirements, user experience and operational overhead. • Building an AI-driven "Access Review as a Service" solution to bridge manual labour gaps between IdPs, applications and governance platforms that saves 50+ hours of analyst time and produces audit ready reports with full chain of custody. • Established a Security Awareness Training program using open-source resources and public threat data to improve the internal security culture. Core Responsibilities: • Led founding SOC operations, owning alert triage (13.9M events/day), investigation workflows, escalation procedures, shift handoffs, case documentation and quality assurance across security monitoring. • Developed and matured SOC operating procedures, including incident intake, severity classification, escalation paths, response playbooks and performance reporting to support leadership visibility. • Evaluated XDR detection and threat hunting capabilities against credential stuffing, credential dumping, and identity-based attack scenarios, recommending improvements to monitoring and prevention controls. • Implemented an XDR-driven incident response pipeline using Jira Service Management and N8N automation, standardizing Tier-1 triage, enrichment, escalation, SLA tracking, and response coordination. • Own SOC 2, NIST CSF2.0 and ISO 27001 readiness, including control assessment, gap analysis, remediation tracking, policy development, evidence management and audit coordination. • Partner with IT, legal, privacy and business stakeholders to conduct risk assessments, define requirements and drive remediation of security and compliance gaps. • Support identity and access management initiatives, including access reviews, IdP and application integrations and governance workflow automation. • Conduct specialized security engagements, including red team assessments, infrastructure automation (AI-driven failure analysis) and AI automation (Access review as a Service). • Supported enterprise engagements by developing SOW’s, POC architectures and implementation documentation, helping align customer requirements with secure delivery standards that accelerated stakeholder confidence.

Risk Analyst at Freelance, Dec 2022 - Feb 2023 · 3 mos, Greater London, In an opportunity with a pre-revenue organisation, I conducted a packet capture analysis with Wireshark and Tshark, technically classified the attack narratives and performed a threat assessment with critical asset allocation, threat modelling and provided NIST ERM based risk analysis with mitigation strategies.

Security Intern at The Unseen Agency, Oct 2021 - Dec 2021 · 3 mos, London, England, United Kingdom, At the NFT hype era, I was able to collaborate with a Cricket themed Non Fungible Token creation & collection project. I security audited the team operations, policies and compliance along with GDPR.

Research Assistant at Xi'an Jiaotong-Liverpool University, Jun 2019 - Sep 2019 · 4 mos, Suzhou, Jiangsu, The project was building a blockchain based threshold digital signature scheme and state it's applications in electronic contracts. I Investigated existing solutions of blockchain based schemes and coordinated with a cross-national team. I also designed the scheme of the signature, delivered it with final report and academic poster, which was presented at the symposium.

Website Designer & Administrator at International Business Language Culture Association, Jan 2019 - Aug 2019 · 8 mos, Suzhou, Jiangsu, China, Being an critical update to the organisation, I built diplomacy and extended the organization's relations with internationals by designing a website from scratch and administrated it with WIX.

Education

Bachelor of Science - BS, Information and Computing Science, University of Liverpool

Master of Science - MS, Cyber Security, Northumbria University