Navigating the Tech Frontier with a Cybersecurity Compass

• Owned the setup and ongoing maintenance of SOCaaS (SOC-as-a-Service).
• Prioritized the identification and remediation of cybersecurity incidents, safeguarding customer data and infrastructure.
• Improved the Response and Remediation capability by building upon the SOAR (Security Orchestration, Automation, and Response) function.
• Integrated SOAR with ticketing platforms to streamline incident resolution.
• Mitigated alert fatigue and bolstered alert fidelity through research and refinement of detection engineering efforts and processes.
• Led and guided the onboarding of several customers for the SOC service.
• Developed process to ensure complete data ingest from valuable sources in customer environments.
• Ensured timely deployment of new customer environments within the allocated time frame.

I was subcontracted out of Acurus to Reece Tech as a full time Cyber Security Analyst & Engineer.
My responsibilities included:

• Uplifting, maintaining and monitoring their SIEM, SOAR & Vulnerability Management platforms.
• Identifying and ingesting missing log sources.
• Designing and developing incident response playbooks for automation.
• Rule tuning and refinement of SIEM analytical rules to reduce the rate of false positives, whilst maintaining a high level of visibility.
• Evaluating and improving areas of Reece’s security posture and procedures.

Following the acquisition of Acurus by Superloop, I seamlessly transitioned into the Superloop team, where I continued to uphold and advance the responsibilities and initiatives that I managed at Acurus. In this capacity, I maintained my focus on delivering exceptional SOCaaS (SOC-as-a-Service) to customers, enhancing cybersecurity incident identification and remediation processes, and leading customer onboarding efforts. My role at Superloop has allowed me to further refine and scale the strategies and processes I developed at Acurus, contributing to the ongoing evolution and success of Superloop’s cybersecurity services.

• Collaborated with the wider team to design and implement custom dashboards in SIEM tools, providing real-time insights into the security landscape.
• Conducted daily health checks and monitoring on SIEM systems to ensure uninterrupted log source integrations, identify any irregular activity such as unexpected spikes in data ingestion, validate rule efficacy, and ensure system optimizations for prompt threat detection and reporting.
• Engaged in continuous learning and research to stay updated on the latest SIEM technologies, threat intelligence, and best practices.
• Conducted regular audits and compliance assessments using SIEM solutions to ensure adherence to security policies and regulatory requirements.
• Analyse data sources to provide actionable recommendations and strategic insights.
• Interface with customers to address concerns, issues, or escalations; track and drive to closure any issues that impact the service and its value to clients.
• Lead vendor support cases from opening to closure.

To be written...