Leading Information Security Engineer

Improved security-stack effectiveness by approximately 60% through MITRE ATT&CK-based exposure management, mapping detection and prevention coverage against adversary techniques and closing gaps and misconfigurations. Leads incident response for critical infrastructure using self-authored incident-response playbooks and SOPs across on-premises, Azure, and AWS environments.

Shapes identity security architecture by leading IAM rollout with SSO and RBAC across five platforms, onboarding 80% of users, and administering PAM for more than 150 privileged accounts. Assesses controls against NIST CSF and ISO 27001, runs access reviews, maintains audit evidence, and automates control checks and reporting with Python and PowerShell.

Embeds security into the SDLC across more than five development projects through STRIDE threat modelling and SAST/DAST in GitHub Actions pipelines. Hardens Linux, Kubernetes, and Docker workloads, and maintains 99.9% availability of customer-facing websites through WAF and DDoS protection configuration and automation.

Engineered SIEM detections by developing and tuning correlation rules, reducing false positives by approximately 50%. Integrated log sources to achieve complete monitoring coverage of in-scope assets.

Conducted intelligence-driven threat hunts using MISP and OpenCTI feeds and handled endpoint incidents through an EDR/XDR platform. Automated enrichment and response activities with Python and PowerShell.

Configured endpoint and network DLP and email-security controls. Responded to data-leakage, phishing, and malware incidents.

Investigated security events by analyzing endpoint, network, and log artifacts. Reconstructed incident timelines to determine root cause, scope, and impact.

Monitored and triaged SIEM, XDR, WAF, and DDoS alerts in a 24/7 SOC protecting payment card infrastructure. Escalated confirmed incidents based on severity.

Documented investigations and escalation decisions, supporting PCI DSS compliance and continuous improvement of incident-response playbooks and procedures.

Master's degree in Information Systems Security in Baku, Azerbaijan.

Bachelor's degree in Information Security in Baku, Azerbaijan.