

12 years leading incident response, automation, and detection engineering across global IT and OT security operations. Proven track record of building and scaling IR capability — from hands-on response in OT manufacturing environments to enterprise-wide IR automation using AI and SOAR. Most recently driving Oracle’s IR automation programme, deploying 16+ Tines SOAR playbooks across the full incident lifecycle, processing thousands of cases monthly. Built SOC and IR capability from zero at Saviynt within 90 days. Led Global SOC operations at AB InBev across IT and OT environments — 150,000+ endpoints in 50+ countries — with direct board-level reporting and hands-on incident response leadership in global manufacturing environments using Claroty for OT threat detection and response. Experienced managing hybrid delivery models combining internal teams with outsourced MSSP/MDR providers, governing vendor SLAs, and translating cybersecurity risk into executive language. CISM-certified; CISSP in progress.
Project Management
Team Leadership
Incident Response Management
Intrusion Detection
Endpoint Protection