Madhan Kumar S

Specializing in scaling security operations and securing emerging AI architectures against adversarial attacks. Led global Security Engineering and SOC operations, delivering 24x7 monitoring, threat detection, incident triage and response across enterprise and managed service environments. • Managed engineering security activities for a cross-functional team, overseeing endpoint, cloud, application and identity security initiatives to ensure enterprise resilience. • Investigated security incidents and implemented corrective actions, ensuring rapid containment, root cause analysis to implement long-term remediation plans across enterprise environments. • Architected enterprise-grade security solutions across endpoint, cloud, DNS, and MFA platforms, embedding secure-by-design principles into system development and service delivery, which reduced critical vulnerabilities by 99% and improved compliance audit scores. • Owned security architecture and engineering strategy across application security, vulnerability management, DLP, endpoint security, cloud security, Cisco DUO, Knowbe4, Email Security and Entra. • Leadership and sound judgment under pressure – guiding cross-functional teams, mentoring engineers, and driving SOC operations with clarity, accountability, and timely decision-making during high-severity incidents • Developed and implemented engineering playbooks/runbooks to standardize SOC operations, improve system stability and strengthen defense-in-depth across enterprise and client environments. • Facilitated daily stand-up calls with the engineering team to review ongoing operational activities, align on client expectations and plan upcoming tasks. • Drove operational stability and resilience initiatives, tracking KPIs and stabilization metrics to improve detection accuracy and response times. • Technical Expertise:Deep hands-on knowledge in endpoint& cloud security, AI-driven defense mechanisms and advanced cyber engineering operations

Lead a SOC team managing global security monitoring, detection, and incident response. Acted as primary escalation point for major incidents, ensuring swift investigation and containment. Conducted root cause analysis (RCA) and delivered actionable recommendations to reduce repeat issues. Published weekly MSR decks and monthly CISO dashboards with threat trends and mitigation reports. Implemented and governed infrastructure security policies, strengthening compliance. Identified and remediated gaps during risk assessments and audits, ensuring stronger cyber resilience. Prepared detailed incident reports and lessons-learned documentation for internal and client use. Mentored and directed the IR team, building a culture of continuous improvement. Designed, implemented, and maintained incident response strategies, playbooks, and escalation processes. Enhanced organizational readiness by leading Tabletop Exercises (TTX) across business units.

Managed large-scale cybersecurity projects, ensuring timely execution and client satisfaction. Conducted risk assessments and prepared IT infrastructure SOPs. Implemented a third-party risk management tool, improving vendor compliance processes. Served as escalation point for L1–L3 analysts, providing technical guidance. Conducted daily stand-up meetings and weekly operations calls for ticket management. Delivered reports on SOC performance, highlighting achievements and SLA compliance. Stayed updated on emerging cybersecurity threats and technologies to strengthen defense. Directed a 25+ member team managing IT infrastructure operations and SOC incident handling. Acted as Subject Matter Expert (SME) for Email Security and Data Loss Prevention (DLP), providing advanced support and solutions. Investigated phishing, impersonation, and malware campaigns, reducing impact on business users. Drafted policies and compliance procedures, supporting ISO 27001 ISMS implementation. Achieved SLA/KPI targets consistently while maintaining operational excellence across locations. Coordinate and support IT teams in policy compliance, control remediation, and audit readiness by aligning with cybersecurity frameworks and standards.

Responsible for managing Chennai Facilities location Operations • Support for location specific capacity planning • Managing project migration between facilities • Responsible for Asset management and endpoint compliance • Managing Floor management support team and support them for technology and automation need • Create process and procedure for technology services • Participate internal and customer security audits and providing artifacts for audit closure. • Attending vendor review calls. • Conducting Daily, Weekly review with Desk Side support team and guide them for improving performance •Manage, Own & Analyze escalations related to EUCS Operations