Senior Security Engineer with 14+ years of progressive experience in enterprise security architecture, cloud security, and SOC operations.
Aktualisiert am 10.02.2026
Profil
Freiberufler / Selbstständiger
Remote-Arbeit
Verfügbar ab: 09.02.2026
Verfügbar zu: 100%
davon vor Ort: 100%
IT-Security
Firewall
SIEM
Defender
Purview)
AWS cloud security
SIEM platforms (Splunk
PCI-DSS
Endpoint Detection & Response (EDR)
Cloud Security (AWS/Azure)
SIEM Implementation
Incident Response
Vulnerability Management
DevSecOps
Compliance & Auditing
English
Hindi
native
German
A2

Einsatzorte

Einsatzorte

Berlin (+50km) Hamburg (+50km) Düsseldorf (+50km) Frankfurt am Main (+50km)
Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

6 Monate
2025-09 - heute

Security Engineering

Senior Security Engineer (Freelance) AWS Cloud Security DevSecOps CI/CD Security ...
Senior Security Engineer (Freelance)
  • Providing security engineering services while developing cybersecurity awareness solutions
  • Available for freelance/contract engagements in cloud security, SOC operations and security architecture
  • Building cybersecurity awareness platform (CyberRaxha) addressing social engineering and online scams, available on Apple App Store and Google Play Store
  • Implementing secure cloud infrastructure on AWS (EC2, S3, CloudFront, Route 53) with DevSecOps best practices
  • Designed and deployed GitLab CI/CD pipeline with integrated security scanning and automated testing
  • Developing full-stack security solutions using Node.js, React, and Express.js with secure API architecture
  • Applying hands-on security expertise to mobile application security for iOS and Android platforms
Available for: Security Architecture Reviews | Cloud Security Implementation | SOC Setup & Operations | Security Automation | Compliance Projects (ISO 27001, PCI-DSS, NIST)
AWS Cloud Security DevSecOps CI/CD Security Mobile App Security Full- Stack Development Secure Architecture Design
Berlin (Germany)
2 Jahre 7 Monate
2023-02 - 2025-08

Security Engineering

Senior Security Engineer
Senior Security Engineer
  • Leading enterprise security initiatives for identity verification platform serving millions of users across Europe
  • Architected and deployed complete Microsoft Security stack including Endpoint Manager (Intune), Microsoft Entra ID, Microsoft Defender for Endpoint and Microsoft Purview DLP, securing 500+ corporate endpoints
  • Designed and implemented SOC playbooks for incident response, threat hunting and escalation procedures, reducing mean time to respond (MTTR) by 45%
  • Led security operations including 24/7 incident management, threat analysis and coordination with CSIRT teams for P1/P2 security events
  • Conducted comprehensive AWS cloud security assessments and implemented IAM policies, security groups, and monitoring configurations aligned with ISO 27001 and NIST frameworks
  • Performed penetration testing using BurpSuite, OWASP ZAP and MobSF for mobile applications, identifying and remediating critical vulnerabilities before production release
  • Implemented file integrity monitoring and vulnerability management using Wazuh, achieving 95% vulnerability remediation rate within SLA
  • Orchestrated security audits for call center providers and third-party partners, ensuring compliance with data protection regulations and company security standards
  • Performed OS hardening across Windows, macOS, and Linux endpoints using CIS Benchmarks, reducing attack surface by 60%
  • Worked on ISO 27001, DORA compliance initiatives, successfully passing external audits with no major findings
Key Achievement: Established company's first formal SOC operation with documented playbooks, KPIs, and escalation procedures now used company-wide
Idnow GmbH, Berlin (Germany)
2 Jahre 9 Monate
2020-04 - 2022-12

Transforming infrastructure security

Senior Infrastructure Security Engineer SentinelOne KACE Splunk ...
Senior Infrastructure Security Engineer
  • Led enterprise security initiatives for global food delivery platform with 30,000+ employees across 50+ countries
  • Project Lead: Directed infrastructure security transformation program with $2M budget, coordinating cross-functional teams across 15+ entities globally
  • Successfully deployed SentinelOne EDR solution to 30,000+ endpoints across Windows, macOS, and Linux systems in under 16 months, integrating with SOC operations and achieving 99.8% deployment success rate
  • Built and managed strategic relationships with entity managers across different regions, ensuring security solution alignment with local compliance requirements
  • Led PCI-DSS compliance project for payment processing systems, implementing security controls and achieving Level 1 Service Provider certification
  • Managed critical security incident escalations in collaboration with SOC and CSIRT teams, maintaining 99.5% SLA for P1 incidents
  • Conducted zero trust architecture proof-of-concept, evaluating solutions from leading vendors and presenting recommendations to C-level executives
  • Developed custom security analytics dashboards in Splunk and Python for threat detection, application performance monitoring, and incident correlation
  • Coordinated vulnerability assessments and penetration testing engagements with thirdparty security vendors, managing remediation tracking and validation
  • Implemented container security solutions with antivirus integration and cloud server hardening for AWS and Azure environments
  • Mentored junior security engineers (team of 5), conducted training sessions for entity managers on new security products, and developed technical documentation
Key Achievement: Completed global EDR rollout 3 months ahead of schedule with 30% under budget
SentinelOne KACE Splunk Python PowerShell AWS Azure PCI-DSS Zero Trust
Delivery Hero SE, Berlin (Germany)
1 Jahr 2 Monate
2019-01 - 2020-02

Cybersecurity

Co-Founder & Security Solutions Architect Python R NLP ...
Co-Founder & Security Solutions Architect
Cybersecurity startup focused on AI-driven threat intelligence and blockchain security solutions
  • Co-founded cybersecurity startup, securing seed funding through investor pitches and demonstrations
  • Architected AI-powered threat intelligence platform using Python and NLP to analyze cybersecurity news from Twitter API, identifying zero-day vulnerabilities 48 hours faster than traditional methods
  • Built proof-of-concept applications for IT operations automation using machine learning and data analytics
  • Managed company finances, product roadmap, and go-to-market strategy for security products
  • Created stock market analysis tools using Python pandas for financial trend prediction
Python R NLP Machine Learning Blockchain AWS Data Science API Integration
on request
4 Jahre 6 Monate
2014-03 - 2018-08

various

Senior Network Security Engineer
Senior Network Security Engineer
Secured critical telecommunications infrastructure serving 70+ million customers nationwide

Security Engineering & Automation (2014 - 2016)

  • Collaborated with development teams to design and build custom security automation tools, reducing manual tasks by 60% and improving network uptime by 15%
  • Developed Splunk-based health monitoring dashboard to identify top application issues, improving application uptime from 97% to 99.3%
  • Built DNS security monitoring system to detect DNS attacks, identify top talkers and automatically clean rogue DNS requests
  • Designed change management correlation tool using Splunk to link network changes with outages, reducing root cause analysis time by 50%
  • Automated incident response workflows using Python and REST APIs, improving team efficiency by 40%

Network Security Operations (2016 - 2018)
  • Managed enterprise security infrastructure including Checkpoint firewalls, Cisco ASA VPN, F5/A10 load balancers, McAfee IDS/IPS, Infoblox DNS/DHCP, and Cisco ISE/ACS authentication systems
  • Resolved P1 security and network incidents including complex load balancer misconfigurations affecting critical applications, maintaining 99.9% uptime SLA
  • Administered VPN infrastructure (Cisco ASA, Nortel) supporting 5,000+ remote users with RSA token-based MFA
  • Configured and maintained McAfee content filtering solutions for 50,000+ users
  • Performed security hardening and policy optimization for firewalls, IPS and web gateways

Key Achievement: Reduced network-related security incidents by 35% through proactive monitoring and automation
T-Mobile USA
2 Jahre 6 Monate
2010-08 - 2013-01

Provision of technical consulting and pre-sales engineering

Network Consulting Engineer ? Security & Wireless Cisco ASA Cisco IPS Cisco Wireless ...
Network Consulting Engineer ? Security & Wireless
  • Provided technical consulting and pre-sales engineering for Cisco security products to service providers globally
  • Delivered technical pre-sales support to account teams for managed security service opportunities with ISPs and telecommunications providers across APAC, EMEA and Americas
  • Designed managed security service portfolios including firewall, IPS, content filtering and vulnerability assessment solutions for enterprise, service provider and SMB market segments
  • Built proof-of-concept environments demonstrating Cisco security capabilities including zero-touch provisioning and automated device management
  • Collaborated with SOC teams to onboard new managed security customers, integrating Cisco devices with SIEM platforms (Novell Sentinel, Splunk) for log monitoring and correlation
  • Conducted due diligence assessments of partner provisioning tools for automation capabilities and integration with Cisco devices
  • Created technical requirements for product enhancements to support new services and device types in managed security offerings
  • Developed KPIs and monitoring requirements for NMS platforms managing Cisco security infrastructure
  • Integrated vulnerability assessment tools (Qualys) and SIEM solutions into managed security service offerings
Cisco ASA Cisco IPS Cisco Wireless Splunk Qualys Novell Sentinel
Cisco Systems, Bangalore (India)
2 Jahre 1 Monat
2008-08 - 2010-08

Infrastructure for Fortune 500 clients

Managed Security Services Engineer
Managed Security Services Engineer
Security analyst in 24/7 Global SOC managing infrastructure for Fortune 500 US-based clients
  • Monitored and responded to security events in 24/7 SOC environment, managing incidents across multiple client networks with 99.7% SLA achievement
  • Configured and managed Cisco ASA firewalls, Checkpoint firewalls, and Symantec Mail Security for SMTP in multi-tenant environment
  • Implemented site-to-site and remote access VPN solutions using Cisco ASA with security contexts and high availability failover configurations
  • Deployed VPN solutions on Nortel platforms with RSA SecurID token-based authentication for secure remote access
  • Created and tuned correlation rules in NetForensics SIEM for security event detection and incident management
  • Performed firewall hardening and security optimization through ACL refinement and policy reviews
  • Led ISO 27001 audit preparation, creating documentation and presenting evidence to external auditors
  • Provided Tier 2/3 support for VPN, RSA authentication, and anti-spam issues via phone and email
  • Conducted weekly customer review meetings presenting network equipment performance reports, uptime/downtime analysis and security posture updates
  • Developed and maintained standard operating procedures (SOPs) and work instructions for security operations
Key Achievement: Achieved 99.7% SLA across all managed security clients for two consecutive years
HCL Comnet Ltd

Aus- und Weiterbildung

Aus- und Weiterbildung

1 Monat
2020-01 - 2020-01

MS Business Analytics

IÉSEG School of Management, Paris (France)
IÉSEG School of Management, Paris (France)
1 Monat
2008-07 - 2008-07

Bachelor of Technology - Electronics Engineering

IILM Academy of Higher Learning, Greater Noida (India)
IILM Academy of Higher Learning, Greater Noida (India)

Kompetenzen

Kompetenzen

Top-Skills

IT-Security Firewall SIEM Defender Purview) AWS cloud security SIEM platforms (Splunk PCI-DSS Endpoint Detection & Response (EDR) Cloud Security (AWS/Azure) SIEM Implementation Incident Response Vulnerability Management DevSecOps Compliance & Auditing

Schwerpunkte

Security Operations Center (SOC)
Endpoint Detection & Response (EDR)
Cloud Security (AWS/Azure)
SIEM Implementation
Incident Response
Vulnerability Management
DevSecOps
Compliance & Auditing

Produkte / Standards / Erfahrungen / Methoden

Profil
Senior Security Engineer with 14+ years of progressive experience in enterprise security architecture, cloud security, and SOC operations. Currently available for freelance/ contract/ fulltime security engineering engagements. Proven expertise deploying EDR solutions to 30,000+ endpoints, building SOC operations from scratch, and implementing zero-trust security frameworks. Strong background in Microsoft 365 security solutions (Intune, Defender, Purview), AWS cloud security, SIEM platforms (Splunk, Wazuh) and DevSecOps automation. Track record of successful ISO 27001, PCI-DSS and NIST compliance implementations across Fortune 500 companies.

Key Achievements and Impact
  • Enterprise Security Transformation: Led EDR deployment to 30,000+ endpoints across 15 countries in under 12 months, 3 months ahead of schedule
  • SOC Operations: Built SOC from ground up with documented playbooks, reducing MTTR by 45% and achieving 99.5% P1 incident SLA
  • Vulnerability Reduction: Decreased critical vulnerability exposure by 70% through systematic patch management and 60% through OS hardening initiatives
  • Automation Impact: Reduced manual security tasks by 60% and improved network uptime by 15% through custom automation tools
  • Compliance Excellence: Achieved ISO 27001, PCI-DSS Level 1, and NIST compliance with zero major audit findings
  • Incident Response: Maintained 99.9% uptime SLA while managing critical P1 security incidents across global infrastructure

Skills
  • Security Operations
    • SOC Architecture
    • Threat Hunting
    • Incident Response
    • CSIRT Collaboration
    • Security Playbooks
    • Threat Intelligence
    • Alert Triage 
    • Root Cause Analysis
  • Endpoint Security
    • SentinelOne 
    • Microsoft Defender for Endpoint 
    • Microsoft Intune
    • Microsoft Entra ID 
    • Azure Active Directory
    • Endpoint Hardening 
    • Patch Management (KACE) 
    • CIS Benchmarks
  • Cloud Security
    • AWS Security (IAM, Security Hub, GuardDuty) 
    • Microsoft 365 Security (Intune, Defender for Office 365, Purview DLP) 
    • Azure Security 
    • Zero Trust Architecture
    • Container Security 
    • Cloud Compliance
  • SIEM & Monitoring
    • Splunk (Dashboard Creation, Correlation Rules) 
    • Wazuh (FIM, Vulnerability Management) 
    • NetForensics SIEM
    • Zabbix 
    • SNMP 
    • Syslog-ng 
    • Log Analytics
  • Network Security
    • Cisco ASA Firewall
    • Checkpoint Firewall (R80, CCSA) 
    • Fortinet 
    • F5 Load Balancer
    • A10 Load Balancer
    • Cisco ISE
    • Infoblox (DNS/DHCP) 
    • VPN Solutions 
    • IDS/IPS (McAfee, Cisco)
  • Data Loss Prevention
    • Microsoft Purview 
    • Email Security
    • Content Filtering 
    • DLP Policy Implementation
  • DevSecOps & Automation
    • Python 
    • PowerShell 
    • Bash
    • R
    • REST
    • APIs 
    • JSON 
    • CI/CD Security Integration
    • Infrastructure as Code
    • Security Automation
  • Penetration Testing
    • Kali Linux 
    • BurpSuite 
    • OWASP ZAP
    • MobSF 
    • Active Directory Penetration Testing
    • Web Application Security Testing
  • Vulnerability Management
    • Nessus 
    • Qualys
    • OWASP ZAP
    • Vulnerability Assessment 
    • Risk Prioritization 
    • Remediation Tracking
  • Compliance & Frameworks
    • ISO 27001 
    • PCI-DSS
    • NIST Cybersecurity Framework 
    • DORA
    • SOC 2 
    • GDPR
    • Security Auditing

Programmiersprachen

Python
R
PowerShell
Bash
HTML
CSS

Einsatzorte

Einsatzorte

Berlin (+50km) Hamburg (+50km) Düsseldorf (+50km) Frankfurt am Main (+50km)
Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

6 Monate
2025-09 - heute

Security Engineering

Senior Security Engineer (Freelance) AWS Cloud Security DevSecOps CI/CD Security ...
Senior Security Engineer (Freelance)
  • Providing security engineering services while developing cybersecurity awareness solutions
  • Available for freelance/contract engagements in cloud security, SOC operations and security architecture
  • Building cybersecurity awareness platform (CyberRaxha) addressing social engineering and online scams, available on Apple App Store and Google Play Store
  • Implementing secure cloud infrastructure on AWS (EC2, S3, CloudFront, Route 53) with DevSecOps best practices
  • Designed and deployed GitLab CI/CD pipeline with integrated security scanning and automated testing
  • Developing full-stack security solutions using Node.js, React, and Express.js with secure API architecture
  • Applying hands-on security expertise to mobile application security for iOS and Android platforms
Available for: Security Architecture Reviews | Cloud Security Implementation | SOC Setup & Operations | Security Automation | Compliance Projects (ISO 27001, PCI-DSS, NIST)
AWS Cloud Security DevSecOps CI/CD Security Mobile App Security Full- Stack Development Secure Architecture Design
Berlin (Germany)
2 Jahre 7 Monate
2023-02 - 2025-08

Security Engineering

Senior Security Engineer
Senior Security Engineer
  • Leading enterprise security initiatives for identity verification platform serving millions of users across Europe
  • Architected and deployed complete Microsoft Security stack including Endpoint Manager (Intune), Microsoft Entra ID, Microsoft Defender for Endpoint and Microsoft Purview DLP, securing 500+ corporate endpoints
  • Designed and implemented SOC playbooks for incident response, threat hunting and escalation procedures, reducing mean time to respond (MTTR) by 45%
  • Led security operations including 24/7 incident management, threat analysis and coordination with CSIRT teams for P1/P2 security events
  • Conducted comprehensive AWS cloud security assessments and implemented IAM policies, security groups, and monitoring configurations aligned with ISO 27001 and NIST frameworks
  • Performed penetration testing using BurpSuite, OWASP ZAP and MobSF for mobile applications, identifying and remediating critical vulnerabilities before production release
  • Implemented file integrity monitoring and vulnerability management using Wazuh, achieving 95% vulnerability remediation rate within SLA
  • Orchestrated security audits for call center providers and third-party partners, ensuring compliance with data protection regulations and company security standards
  • Performed OS hardening across Windows, macOS, and Linux endpoints using CIS Benchmarks, reducing attack surface by 60%
  • Worked on ISO 27001, DORA compliance initiatives, successfully passing external audits with no major findings
Key Achievement: Established company's first formal SOC operation with documented playbooks, KPIs, and escalation procedures now used company-wide
Idnow GmbH, Berlin (Germany)
2 Jahre 9 Monate
2020-04 - 2022-12

Transforming infrastructure security

Senior Infrastructure Security Engineer SentinelOne KACE Splunk ...
Senior Infrastructure Security Engineer
  • Led enterprise security initiatives for global food delivery platform with 30,000+ employees across 50+ countries
  • Project Lead: Directed infrastructure security transformation program with $2M budget, coordinating cross-functional teams across 15+ entities globally
  • Successfully deployed SentinelOne EDR solution to 30,000+ endpoints across Windows, macOS, and Linux systems in under 16 months, integrating with SOC operations and achieving 99.8% deployment success rate
  • Built and managed strategic relationships with entity managers across different regions, ensuring security solution alignment with local compliance requirements
  • Led PCI-DSS compliance project for payment processing systems, implementing security controls and achieving Level 1 Service Provider certification
  • Managed critical security incident escalations in collaboration with SOC and CSIRT teams, maintaining 99.5% SLA for P1 incidents
  • Conducted zero trust architecture proof-of-concept, evaluating solutions from leading vendors and presenting recommendations to C-level executives
  • Developed custom security analytics dashboards in Splunk and Python for threat detection, application performance monitoring, and incident correlation
  • Coordinated vulnerability assessments and penetration testing engagements with thirdparty security vendors, managing remediation tracking and validation
  • Implemented container security solutions with antivirus integration and cloud server hardening for AWS and Azure environments
  • Mentored junior security engineers (team of 5), conducted training sessions for entity managers on new security products, and developed technical documentation
Key Achievement: Completed global EDR rollout 3 months ahead of schedule with 30% under budget
SentinelOne KACE Splunk Python PowerShell AWS Azure PCI-DSS Zero Trust
Delivery Hero SE, Berlin (Germany)
1 Jahr 2 Monate
2019-01 - 2020-02

Cybersecurity

Co-Founder & Security Solutions Architect Python R NLP ...
Co-Founder & Security Solutions Architect
Cybersecurity startup focused on AI-driven threat intelligence and blockchain security solutions
  • Co-founded cybersecurity startup, securing seed funding through investor pitches and demonstrations
  • Architected AI-powered threat intelligence platform using Python and NLP to analyze cybersecurity news from Twitter API, identifying zero-day vulnerabilities 48 hours faster than traditional methods
  • Built proof-of-concept applications for IT operations automation using machine learning and data analytics
  • Managed company finances, product roadmap, and go-to-market strategy for security products
  • Created stock market analysis tools using Python pandas for financial trend prediction
Python R NLP Machine Learning Blockchain AWS Data Science API Integration
on request
4 Jahre 6 Monate
2014-03 - 2018-08

various

Senior Network Security Engineer
Senior Network Security Engineer
Secured critical telecommunications infrastructure serving 70+ million customers nationwide

Security Engineering & Automation (2014 - 2016)

  • Collaborated with development teams to design and build custom security automation tools, reducing manual tasks by 60% and improving network uptime by 15%
  • Developed Splunk-based health monitoring dashboard to identify top application issues, improving application uptime from 97% to 99.3%
  • Built DNS security monitoring system to detect DNS attacks, identify top talkers and automatically clean rogue DNS requests
  • Designed change management correlation tool using Splunk to link network changes with outages, reducing root cause analysis time by 50%
  • Automated incident response workflows using Python and REST APIs, improving team efficiency by 40%

Network Security Operations (2016 - 2018)
  • Managed enterprise security infrastructure including Checkpoint firewalls, Cisco ASA VPN, F5/A10 load balancers, McAfee IDS/IPS, Infoblox DNS/DHCP, and Cisco ISE/ACS authentication systems
  • Resolved P1 security and network incidents including complex load balancer misconfigurations affecting critical applications, maintaining 99.9% uptime SLA
  • Administered VPN infrastructure (Cisco ASA, Nortel) supporting 5,000+ remote users with RSA token-based MFA
  • Configured and maintained McAfee content filtering solutions for 50,000+ users
  • Performed security hardening and policy optimization for firewalls, IPS and web gateways

Key Achievement: Reduced network-related security incidents by 35% through proactive monitoring and automation
T-Mobile USA
2 Jahre 6 Monate
2010-08 - 2013-01

Provision of technical consulting and pre-sales engineering

Network Consulting Engineer ? Security & Wireless Cisco ASA Cisco IPS Cisco Wireless ...
Network Consulting Engineer ? Security & Wireless
  • Provided technical consulting and pre-sales engineering for Cisco security products to service providers globally
  • Delivered technical pre-sales support to account teams for managed security service opportunities with ISPs and telecommunications providers across APAC, EMEA and Americas
  • Designed managed security service portfolios including firewall, IPS, content filtering and vulnerability assessment solutions for enterprise, service provider and SMB market segments
  • Built proof-of-concept environments demonstrating Cisco security capabilities including zero-touch provisioning and automated device management
  • Collaborated with SOC teams to onboard new managed security customers, integrating Cisco devices with SIEM platforms (Novell Sentinel, Splunk) for log monitoring and correlation
  • Conducted due diligence assessments of partner provisioning tools for automation capabilities and integration with Cisco devices
  • Created technical requirements for product enhancements to support new services and device types in managed security offerings
  • Developed KPIs and monitoring requirements for NMS platforms managing Cisco security infrastructure
  • Integrated vulnerability assessment tools (Qualys) and SIEM solutions into managed security service offerings
Cisco ASA Cisco IPS Cisco Wireless Splunk Qualys Novell Sentinel
Cisco Systems, Bangalore (India)
2 Jahre 1 Monat
2008-08 - 2010-08

Infrastructure for Fortune 500 clients

Managed Security Services Engineer
Managed Security Services Engineer
Security analyst in 24/7 Global SOC managing infrastructure for Fortune 500 US-based clients
  • Monitored and responded to security events in 24/7 SOC environment, managing incidents across multiple client networks with 99.7% SLA achievement
  • Configured and managed Cisco ASA firewalls, Checkpoint firewalls, and Symantec Mail Security for SMTP in multi-tenant environment
  • Implemented site-to-site and remote access VPN solutions using Cisco ASA with security contexts and high availability failover configurations
  • Deployed VPN solutions on Nortel platforms with RSA SecurID token-based authentication for secure remote access
  • Created and tuned correlation rules in NetForensics SIEM for security event detection and incident management
  • Performed firewall hardening and security optimization through ACL refinement and policy reviews
  • Led ISO 27001 audit preparation, creating documentation and presenting evidence to external auditors
  • Provided Tier 2/3 support for VPN, RSA authentication, and anti-spam issues via phone and email
  • Conducted weekly customer review meetings presenting network equipment performance reports, uptime/downtime analysis and security posture updates
  • Developed and maintained standard operating procedures (SOPs) and work instructions for security operations
Key Achievement: Achieved 99.7% SLA across all managed security clients for two consecutive years
HCL Comnet Ltd

Aus- und Weiterbildung

Aus- und Weiterbildung

1 Monat
2020-01 - 2020-01

MS Business Analytics

IÉSEG School of Management, Paris (France)
IÉSEG School of Management, Paris (France)
1 Monat
2008-07 - 2008-07

Bachelor of Technology - Electronics Engineering

IILM Academy of Higher Learning, Greater Noida (India)
IILM Academy of Higher Learning, Greater Noida (India)

Kompetenzen

Kompetenzen

Top-Skills

IT-Security Firewall SIEM Defender Purview) AWS cloud security SIEM platforms (Splunk PCI-DSS Endpoint Detection & Response (EDR) Cloud Security (AWS/Azure) SIEM Implementation Incident Response Vulnerability Management DevSecOps Compliance & Auditing

Schwerpunkte

Security Operations Center (SOC)
Endpoint Detection & Response (EDR)
Cloud Security (AWS/Azure)
SIEM Implementation
Incident Response
Vulnerability Management
DevSecOps
Compliance & Auditing

Produkte / Standards / Erfahrungen / Methoden

Profil
Senior Security Engineer with 14+ years of progressive experience in enterprise security architecture, cloud security, and SOC operations. Currently available for freelance/ contract/ fulltime security engineering engagements. Proven expertise deploying EDR solutions to 30,000+ endpoints, building SOC operations from scratch, and implementing zero-trust security frameworks. Strong background in Microsoft 365 security solutions (Intune, Defender, Purview), AWS cloud security, SIEM platforms (Splunk, Wazuh) and DevSecOps automation. Track record of successful ISO 27001, PCI-DSS and NIST compliance implementations across Fortune 500 companies.

Key Achievements and Impact
  • Enterprise Security Transformation: Led EDR deployment to 30,000+ endpoints across 15 countries in under 12 months, 3 months ahead of schedule
  • SOC Operations: Built SOC from ground up with documented playbooks, reducing MTTR by 45% and achieving 99.5% P1 incident SLA
  • Vulnerability Reduction: Decreased critical vulnerability exposure by 70% through systematic patch management and 60% through OS hardening initiatives
  • Automation Impact: Reduced manual security tasks by 60% and improved network uptime by 15% through custom automation tools
  • Compliance Excellence: Achieved ISO 27001, PCI-DSS Level 1, and NIST compliance with zero major audit findings
  • Incident Response: Maintained 99.9% uptime SLA while managing critical P1 security incidents across global infrastructure

Skills
  • Security Operations
    • SOC Architecture
    • Threat Hunting
    • Incident Response
    • CSIRT Collaboration
    • Security Playbooks
    • Threat Intelligence
    • Alert Triage 
    • Root Cause Analysis
  • Endpoint Security
    • SentinelOne 
    • Microsoft Defender for Endpoint 
    • Microsoft Intune
    • Microsoft Entra ID 
    • Azure Active Directory
    • Endpoint Hardening 
    • Patch Management (KACE) 
    • CIS Benchmarks
  • Cloud Security
    • AWS Security (IAM, Security Hub, GuardDuty) 
    • Microsoft 365 Security (Intune, Defender for Office 365, Purview DLP) 
    • Azure Security 
    • Zero Trust Architecture
    • Container Security 
    • Cloud Compliance
  • SIEM & Monitoring
    • Splunk (Dashboard Creation, Correlation Rules) 
    • Wazuh (FIM, Vulnerability Management) 
    • NetForensics SIEM
    • Zabbix 
    • SNMP 
    • Syslog-ng 
    • Log Analytics
  • Network Security
    • Cisco ASA Firewall
    • Checkpoint Firewall (R80, CCSA) 
    • Fortinet 
    • F5 Load Balancer
    • A10 Load Balancer
    • Cisco ISE
    • Infoblox (DNS/DHCP) 
    • VPN Solutions 
    • IDS/IPS (McAfee, Cisco)
  • Data Loss Prevention
    • Microsoft Purview 
    • Email Security
    • Content Filtering 
    • DLP Policy Implementation
  • DevSecOps & Automation
    • Python 
    • PowerShell 
    • Bash
    • R
    • REST
    • APIs 
    • JSON 
    • CI/CD Security Integration
    • Infrastructure as Code
    • Security Automation
  • Penetration Testing
    • Kali Linux 
    • BurpSuite 
    • OWASP ZAP
    • MobSF 
    • Active Directory Penetration Testing
    • Web Application Security Testing
  • Vulnerability Management
    • Nessus 
    • Qualys
    • OWASP ZAP
    • Vulnerability Assessment 
    • Risk Prioritization 
    • Remediation Tracking
  • Compliance & Frameworks
    • ISO 27001 
    • PCI-DSS
    • NIST Cybersecurity Framework 
    • DORA
    • SOC 2 
    • GDPR
    • Security Auditing

Programmiersprachen

Python
R
PowerShell
Bash
HTML
CSS

Vertrauen Sie auf Randstad

Im Bereich Freelancing
Im Bereich Arbeitnehmerüberlassung / Personalvermittlung

Fragen?

Rufen Sie uns an +49 89 500316-300 oder schreiben Sie uns:

Das Freelancer-Portal

Direktester geht's nicht! Ganz einfach Freelancer finden und direkt Kontakt aufnehmen.