Experience

Architected and engineered Google Security Operations (Chronicle) as the enterprise SIEM — ingestion pipelines, parsers, detection logic, and automated response built from scratch.

Built Palo Alto XSOAR playbooks and integrations with Google SecOps that reduced MTTR and eliminated manual SOC triage activities.

Designed security integrations across AWS, Azure, GCP, Okta, secure web gateway, and endpoint platforms for centralized visibility and detection coverage.

Hired and built the cyber threat intelligence and threat hunt team; converted adversary TTP research into detection requirements and hunt hypotheses.

Deployed Attack Surface Management, CSPM, and DSPM capabilities to close cloud and data visibility gaps, plus enterprise insider threat detection.

Represented security engineering in FedRAMP, NIST, ISO 27001, SOC 2, and PCI-DSS audits with architecture documentation and control evidence.