Engaged to roll out application control across the endpoint estate and improve how the SOC handled incidents. Operated in a hybrid SOC and security engineering role, providing both hands-on technical leadership and process development.
The work combined day-to-day operational improvements with longer-term engineering. Application control rules were built and tuned so the business kept running, while triage workflows and analyst training made incident handling more consistent.
Key Achievements
- Contributed to the deployment and tuning of Carbon Black App Control across 1,000+ endpoints, developing and refining rules to ensure legitimate business applications were permitted while preventing unauthorised executables
- Improved SOC processes and triage workflows for more consistent incident handling
- Delivered targeted SOC training to enhance analyst skill sets and response times
Tell us what you're working on.
Whether it's a noisy SOC, detections you don't trust, an untested response plan or a security project that needs delivering, a short call is the quickest way to work out what to do next.
Free 30-minute call · No obligation · Speak directly with the person who'd do the work