Abdullah Aftab

I’m a Senior Security Engineer focused on GRC & Compliance, with 6+ years of hands-on experience designing and scaling Governance, Risk, and Compliance programs. I author information security policies and procedures, and I’m proactive about turning compliance requirements into reliable, operational workflows.

I lead third-party vendor risk assessments and manage the full POA&M lifecycle—from finding identification through remediation validation—while enforcing frameworks including NIST 800-53, NIST CSF, RMF, HIPAA, and PCI-DSS. I bring deep expertise in GRC architecture, risk assessment, and security policy development across federal and enterprise environments.

I also use my secondary security engineering background to improve detection and response outcomes. I refine SOC use cases and MSSP-related workflows by improving alert triage and security event correlation using Microsoft Sentinel and Splunk, and I’ve engineered MITRE ATT&CK-aligned detection rules to reduce MTTD and false positives.

In practice, I automate compliance workflows using Microsoft Sentinel Logic Apps and Playbooks (SOAR automation) and deliver audit-ready reporting through Splunk dashboards and executive GRC documentation. I’ve consistently improved efficiency—reducing manual compliance tracking by 50%, improving SOC efficiency by 40%, and strengthening IAM outcomes through enforced MFA and zero-trust governance.