-Lead Incident Response, Threat Intelligence, Threat Hunting, Detection Engineering, Malware Analysis, Security Analytics.
-Act as escalation owner for high‑severity and complex incidents.
-Demonstrates strong people management skills by effectively leading teams, mentoring talent, and driving performance and accountability.
-Demonstrates strong decision‑making capabilities during security incidents, enabling timely containment, risk mitigation, and effective resolution of incidents.
-Drive RCA, CAPA, mock drills, tabletop exercises, cyber crisis simulations.
-Establish threat intelligence, TTP‑based hunting, APT & ransomware monitoring.
-Review SIEM use‑case lifecycle, alert quality and detection coverage.
-Drive automation strategies like SOAR, BAS, deception, cyber range, automation initiatives.
-Define and baseline the KPIs/KRIs, executive dashboards, leadership reporting.
-Strong reporting capabilities to send key updates to CISO and senior leadership team.
-Strong collaboration with other functions: Governance, PRC, TechOps; act as trusted advisors