Extensive hands‑on leadership in global SOC operations, including SIEM, SOAR, EDR/XDR ecosystems, detection engineering, high‑volume alert management, triaging, containment and incident management. * Skilled in establishing incident response playbooks, orchestrating cross‑functional incident- and crisis management, and driving post‑incident learning to measurably improve posture and resilience. * Responsibility for leading the team that integrates monitoring, threat intelligence, incident detection and response, detection engineering, and digital forensics across infrastructure, product and operational environments. * Incident Response: drive organizational readiness for the detection and response to cyber incidents, including incident detection, classification, containment, eradication and recovery in collaboration with and ensure post-incident reviews to drive measurable posture improvements.
mehr