Brought in following a significant security incident to lead a full security maturity uplift across the organisation. Worked directly with the Head of Security Operations to address and remediate audit findings and build an incident response capability the team could run. Alongside this, led the SIEM migration to Google SecOps (Chronicle) and upskilled the internal SOC in detection and response.
The engagement put a clear, documented process in place for how the organisation detects, triages and responds, with a company-wide CSIRP and 20+ threat-specific runbooks, so the next incident is met with a plan rather than panic.
Key Achievements
- Successfully addressed and remediated audit findings
- Designed and implemented a company-wide Cyber Security Incident Response Plan (CSIRP) with 20+ threat-specific runbooks
- Led the organisation's SIEM migration to Google SecOps (Chronicle)
- Upskilled the internal SOC team in detection and response, improving triage accuracy and analytical capability
- Developed and deployed new custom detection rules and tuned existing alerts to reduce false positives and improve visibility
Tell us what you're working on.
Whether it's a noisy SOC, detections you don't trust, an untested response plan or a security project that needs delivering, a short call is the quickest way to work out what to do next.
Free 30-minute call · No obligation · Speak directly with the person who'd do the work