Security Operations Engineer
I build and scale detection, incident response, security automation, and cloud security, with 6+ years across big tech, autonomous vehicles, and regulated healthcare.
Security Engineer with 6+ years of experience building and scaling detection, IT security, incident response, security automation, and cloud security capabilities across big tech, autonomous vehicles, and regulated healthcare environments. Proven impact includes reducing MTTR by 65%, automatically resolving 45% of security alerts, improving vulnerability remediation SLA adherence by 50%, and deploying security controls across 150K+ endpoints. Deep hands-on experience with SIEM/SOAR, EDR/XDR, AWS/GCP/Azure, Kubernetes, Python, Terraform, vulnerability management, detection engineering, and 24/7 incident response.
Programs and initiatives I've built or led, and what they changed.
Built a SOAR program that integrates SIEM, EDR/XDR, and cloud security platforms with AI agents for alert triage and investigation, plus automated enrichment, containment, and remediation workflows.
Led ingestion and operationalization of AWS security telemetry (GuardDuty, CloudTrail, IAM, and EKS logs) in Panther, and rolled out SentinelOne and Microsoft Defender across 500+ cloud VMs.
Built a vulnerability management program with authenticated scanning across servers and cloud, and automated dependency patching with Renovate across 2,000+ assets.
Automated security reviews for GCP projects to enforce internal security requirements consistently and at scale.
Engineered and deployed security configurations across a global enterprise endpoint fleet and automated Linux hardening, including disk encryption and policy enforcement.
Led an initiative to standardize firewall-access requests across a large enterprise.
Security writeups, detection ideas, and project deep-dives.
Let's discuss cybersecurity opportunities, threat intelligence sharing, or collaboration on security projects.