bidk
Director of Security Operations
Experienced cybersecurity leader with over 15 years of expertise in enterprise security operations, incident response, cyber risk management, and security strategy within highly regulated industries. Proven track record of leading global Security Operations Centers (SOCs), building resilient cyber defense programs, and managing large-scale incident response efforts for critical financial infrastructure. Specializes in security governance, threat intelligence, vulnerability management, cloud security, digital forensics, and operational resilience. Passionate about developing high-performing security teams, strengthening organizational security posture, and driving continuous improvement through automation and proactive defense. Recognized for collaborating across engineering, infrastructure, and executive leadership to align cybersecurity initiatives with business objectives while ensuring compliance with industry standards and regulatory requirements. Outside of work, I enjoy mentoring aspiring cybersecurity professionals, contributing to industry discussions on emerging threats, and exploring new approaches to security operations and threat detection.
About Me
Experienced cybersecurity leader with over 15 years of expertise in enterprise security operations, incident response, cyber risk management, and security strategy within highly regulated industries. Proven track record of leading global Security Operations Centers (SOCs), building resilient cyber defense programs, and managing large-scale incident response efforts for critical financial infrastructure. Specializes in security governance, threat intelligence, vulnerability management, cloud security, digital forensics, and operational resilience. Passionate about developing high-performing security teams, strengthening organizational security posture, and driving continuous improvement through automation and proactive defense. Recognized for collaborating across engineering, infrastructure, and executive leadership to align cybersecurity initiatives with business objectives while ensuring compliance with industry standards and regulatory requirements. Outside of work, I enjoy mentoring aspiring cybersecurity professionals, contributing to industry discussions on emerging threats, and exploring new approaches to security operations and threat detection.
Portfolio System
Modern, premium presentation for work that deserves attention.
A sharper profile story, cleaner sections, and stronger visual hierarchy for recruiters and collaborators.
Skills
Tools and strengths
Projects
Selected work
Global Security Operations Center Modernization
Technologies: Microsoft Sentinel, Splunk Enterprise Security, Microsoft Defender XDR Led the modernization of a global Security Operations Center by integrating centralized monitoring, automated alert correlation, and standardized incident response procedures. Reduced mean time to detect and respond to high-priority security incidents while improving operational visibility across multiple regional offices.
Enterprise Threat Intelligence Program
Technologies: MISP, VirusTotal Enterprise, OpenCTI Established an enterprise threat intelligence capability to collect, analyze, and operationalize cyber threat data. Implemented intelligence-driven detection strategies that improved proactive identification of emerging threats targeting the financial sector.
Cloud Security Governance Framework
Technologies: Microsoft Azure, AWS, Microsoft Defender for Cloud Designed and implemented cloud security governance standards covering identity management, workload protection, compliance monitoring, and continuous security assessment across hybrid cloud environments.
Security Incident Response Automation
Technologies: Microsoft Sentinel, Power Automate, Python Directed the implementation of automated incident response workflows to accelerate containment, notification, and evidence collection for common security events. Standardized response procedures while reducing manual effort for the SOC team.
Enterprise Vulnerability Management Program
Technologies: Tenable Nessus, Qualys VMDR Developed a risk-based vulnerability management program for enterprise infrastructure, prioritizing remediation based on asset criticality, exploitability, and business impact. Improved remediation timelines and strengthened the organization's overall security posture.
Cybersecurity Awareness Initiative
Technologies: Microsoft 365, KnowBe4 Designed and launched a company-wide security awareness program focused on phishing prevention, password security, social engineering defense, and secure remote work practices. Increased employee participation and improved resilience against common cyber threats.
Business Continuity & Disaster Recovery Planning
echnologies: VMware, Veeam Backup & Replication Collaborated with infrastructure and engineering teams to develop disaster recovery strategies, backup validation procedures, and recovery exercises to ensure critical financial services remained resilient during operational disruptions.