06/26/2025 updated
100 % available
Experienced Cyber Security Professional with SOC Leadership Expertise
Livingston, United Kingdom
Only remote
BEng Computer Security and Digital ForensicsInnovationResearchArtificial IntelligenceArchitectureAutomationMicrosoft AzureCloud ComputingCloud Computing SecurityComputer SecurityIncident ResponseIdentity ManagementSecurity EngineeringInformation Systems Security Architecture ProfessionalLog AnalysisMaintenance
SOC Service Architecture and Management
Architecture, deployment and maintenance of Security Operations Center services including Azure Sentinel and Splunk Cloud. Experience with full end-to-end flow from Data Source to Alert creation using various security applications.
SIEM/EDR/XDR Implementation
Deployment, configuration and maintenance of security applications including SIEM solutions (on-premises and cloud), SOAR, EDR, DLP and firewalls. Working with various XDR/EDR solutions including Carbon Black, Microsoft Defender, and Tanium.
Threat Detection and Incident Response
Experience in building detection capabilities across multiple SIEM (Azue-KQL, Splunk-SPL and FortiSIEM) and EDR platforms and leveraging these detections in Incident Response activities. Performing threat analysis, coordinating and assisting in the incident response process. Experience
Cloud Security
Experience with Google Cloud Platform security, developing detective controls to enhance security posture. Working with Google Clouds Log Analytics and Log Explorers to evaluate data for security log monitoring. Experience with building detective controls and securing Azure platform by utilising IAM, Network and application controls.
Security Automation
Development of automation and scripts to facilitate SOC service processes. Implementation of ticket management systems to streamline technical tasks for large-scale deployments.
AI Implementation for Security
Leadership of proof of concept for an AI Predictive Model to support SOC L1 investigations, demonstrating innovative approaches to security challenges.
Security Certifications
Professional certifications including CISSP, Security+, Certified Splunk Admin, and Tanium Operations and Security Essential, demonstrating advanced understanding of cyber security concepts.
Architecture, deployment and maintenance of Security Operations Center services including Azure Sentinel and Splunk Cloud. Experience with full end-to-end flow from Data Source to Alert creation using various security applications.
SIEM/EDR/XDR Implementation
Deployment, configuration and maintenance of security applications including SIEM solutions (on-premises and cloud), SOAR, EDR, DLP and firewalls. Working with various XDR/EDR solutions including Carbon Black, Microsoft Defender, and Tanium.
Threat Detection and Incident Response
Experience in building detection capabilities across multiple SIEM (Azue-KQL, Splunk-SPL and FortiSIEM) and EDR platforms and leveraging these detections in Incident Response activities. Performing threat analysis, coordinating and assisting in the incident response process. Experience
Cloud Security
Experience with Google Cloud Platform security, developing detective controls to enhance security posture. Working with Google Clouds Log Analytics and Log Explorers to evaluate data for security log monitoring. Experience with building detective controls and securing Azure platform by utilising IAM, Network and application controls.
Security Automation
Development of automation and scripts to facilitate SOC service processes. Implementation of ticket management systems to streamline technical tasks for large-scale deployments.
AI Implementation for Security
Leadership of proof of concept for an AI Predictive Model to support SOC L1 investigations, demonstrating innovative approaches to security challenges.
Security Certifications
Professional certifications including CISSP, Security+, Certified Splunk Admin, and Tanium Operations and Security Essential, demonstrating advanced understanding of cyber security concepts.
Experience
Professional experience5 - 10 years
Freelancer since2020
Languages
EnglishNative speaker
Project history
Built and managed a high-performing Cyber Security Engineering team, growing from sole engineer to a team of six. Architected multiple SOC Services including Azure Sentinel and Splunk Enterprise. Led deployment and integration of advanced cybersecurity technologies including SIEM, XDR, and SOAR solutions.
Served as Senior Security Engineer SME, leading development and enhancement of Security Log Management solutions. Developed detective controls for Google Cloud Platform to enhance security posture. Utilized Splunk at Power User and Admin levels to develop, test, and optimize SPL for detecting malicious threats.
Operated in a technical security environment performing log analysis, security product configuration, and incident response duties. Led investigations into anomalies and suspicious activities, identifying malicious behavior while adhering to established reporting protocols.