Monitored, investigated and responded to security incidents across SIEM and EDR platforms, consistently meeting SLA targets for triage and escalation.

Conducted comprehensive vulnerability assessments using Qualys and coordinated patching cycles to reduce organisational attack surface.

Investigated and remediated phishing campaigns — analysing headers, sender reputation, malicious URLs and attachments to identify IOCs and prevent account takeover.

Managed end-to-end deployment and configuration of the Microsoft E5 Security Stack across Azure — endpoints, identities, cloud and email brought under one coverage model.

Architected Microsoft Purview DLP policies and Insider Risk Management workflows to prevent unauthorised data exfiltration across cloud and endpoint channels.

Maintained the organisational risk register in line with ISO 27001, contributed to audit-readiness documentation, and produced executive-level incident reports.