Himanshu Bandhu

• Designed and implemented complex FortiSOAR playbooks and automated workflows, supporting 3,000+ MSSP clients and enhancing their security posture. • Developed sophisticated MITRE ATT&CK-aligned detection logic, leading to a 30% reduction in Mean Time To Respond (MTTR) for critical security incidents. • Managed the end-to-end FortiSOAR and FortiSIEM content lifecycle, automating deployments via Python scripting and REST API for increased efficiency. • Reduced false positives by 20% through continuous tuning and optimization of detection rules, significantly improving analyst alert fidelity. • Ensured NIST, ISO 27001, and GDPR compliance across all security workflows and content, achieving a flawless audit record for managed services.

Led secure AWS/Azure infrastructure projects using Terraform and Ansible, reducing provisioning times by 50% and infrastructure costs by 20%. Hardened CI/CD pipelines with Jenkins (integrated container image scanning, vulnerability checks), eliminating 15+ critical vulnerabilities. Maintained security observability and incident monitoring via Prometheus and CloudWatch. Built and deployed backup/recovery solutions to enhance high availability and business continuity. Drove cloud project delivery focused on security, scalability, and operational efficiency; established security best practices adopted company-wide

Led security architecture, operations, and risk management for a global environment with 500,000+ endpoints. Delivered endpoint protection (McAfee/Trellix ePO, Defender), maintained flawless compliance (GDPR, HIPAA, PCI DSS), and drove vulnerability management, DLP, and incident response. Directed enterprise-wide incident response and forensics (EnCase, FTK), restored business operations during critical events, and created robust playbooks and processes. Redesigned network security using Palo Alto, Cisco ASA, and led penetration testing and vulnerability assessments, cutting incidents by 40%. Managed SIEM and SOAR platforms (Splunk, QRadar, ArcSight, FortiSOAR), automated incident response, advanced detection engineering, and threat modeling (MITRE ATT&CK). Integrated DevSecOps and automated cloud security (Terraform, Ansible, Docker, Kubernetes) for GCP, Azure, and AWS. Architected and implemented Zero Trust, MFA, and IAM solutions (Azure AD, Okta, CyberArk), driving identity governance and access management. Developed and operationalized AI/ML-driven threat detection, led threat intelligence and hunting, and improved detection accuracy by 30–35%. Ran security awareness and training, mentored teams, reduced phishing risk, and ensured ongoing compliance (ISO 27001, SOC2). Managed complex projects, drove business alignment, and delivered technical documentation to ensure knowledge transfer and operational resilience.

Configured, installed, and supported equipment in a Microsoft Windows environment to client specifications. Installed and configured computer hardware, operating systems, and applications. Troubleshot and resolved computer and telephony issues for clients via remote support. Monitored and maintained computer systems and networks. Maintained software applications, operating systems, and performed regular maintenance.

Configured, installed, and supported equipment in a Microsoft Windows environment as per client requirements. Troubleshot and resolved computer and telephony issues, providing both on-site and remote support. Maintained software applications and operating systems. Supervised administration of systems and server-related networks.

Installed and configured computer hardware, software, systems, networks, printers, and scanners. Tested, debugged, diagnosed, and corrected errors and faults in home computers. Provided technical support to clients and computer users. Investigated, diagnosed, and solved computer software and hardware faults.