Designed and led the complete migration of a 10,000-seat enterprise from perimeter-based security to a full zero-trust architecture. Involved identity re-architecture, micro-segmentation, and continuous verification policies.

Built an internal threat hunting platform that correlates IOCs across 15+ data sources, automates hypothesis testing, and generates analyst workflows. Reduced hunting cycle from 2 weeks to 3 days.

Led a full-scope red team engagement against critical infrastructure spanning OT/IT environments. Identified 3 critical vulnerabilities that would have allowed physical process disruption.

Architected and deployed a SOAR platform from scratch, integrating 25+ security tools and building 80+ automated playbooks covering phishing, malware, and insider threat workflows.