Security leadership
Lead the service. Develop the investigators.
Lead SOC continuity and replacement MDR onboarding, from integration configuration to service metrics, analyst access and operational dashboards. Develop investigators through technical guidance, shared standards and case review, with further experience in multi-client SOC leadership and offensive service delivery.
All cards in this section are viewed.
Lead the SOC through an MDR outage
SOC Operations & MDR TransitionI led SOC continuity during an MDR outage, preserved supplier knowledge and established out-of-hours escalation while supporting interim incident handling, threat hunting and Sentinel tuning.
Read the storyLead a new MDR service from integration to operations
MDR Service Onboarding & SIEM/SOAR IntegrationI led MDR service onboarding and dual-SOAR integration, defined ServiceNow SecOps MTTA/MTTC/MTTR and reporting requirements across two queues, five states and three substates, and streamlined analyst JML.
Read the storyLeading SOC shifts across 150+ client environments
MSSP Security Operations & Incident ResponseI combined SOC shift leadership with hands-on incident response in a seven-person team, within a service monitoring 70,000+ endpoints across 150+ organisations.
Read the storySet technical standards and onboard six SOC colleagues
SOC Leadership & Analyst DevelopmentI developed technical guidance and investigation standards to align SOC output, personally onboarded six analysts and engineers, supported recruitment and coached practical investigation techniques.
Read the storyTechnical oversight of 50+ monthly offensive engagements
Offensive Security LeadershipI oversaw a team portfolio of more than fifty offensive engagements per month, reviewing technical delivery and reports while helping clients act on the findings.
Read the storyAutomate incident briefings that explain the follow-up
Incident Reporting & Executive CommunicationBuilt an automated executive-slide workflow that connects each incident of note to the weakness exploited and the corrective actions that need attention.
Read the storySkills used in these cases