Open to opportunities

Aman Singh

@aman2406

Message

Senior Cybersecurity Engineer specializing in SIEM, EDR, detection engineering, and incident response.

United States

Message

What I'm looking for

I seek a role where I can lead detection engineering and incident response, leverage automation and threat intelligence, impact enterprise security posture, and work within a compliance-focused, collaborative team.

I am a Senior Cybersecurity Engineer and subject-matter expert with over 11 years securing enterprise environments across healthcare, insurance, energy utility, and oil & gas.

I design, implement, and manage SIEM, DLP, EDR, and application security solutions, lead security operations, threat detection, incident response, and run red/purple team activities to harden defenses.

I build MITRE ATT&CK–aligned detections, engineer Splunk onboarding and performance tuning, automate asset reconciliation (Python/PowerShell), and operationalize Risk-Based Alerting to reduce MTTR and drive remediation campaigns.

I champion compliance with ISO 27001, NIST, HIPAA, HITRUST, PCI DSS, and SOX, author runbooks and SOPs, and collaborate cross-functionally to improve security posture in complex, high-risk environments.

Experience

Work history, roles, and key accomplishments

Current

Sr. Cyber Security Engineer

Current

Florida Department of Financial Services

May 2025 - Present (4 months)

Integrated ReliaQuest GreyMatter MDR with Splunk, SentinelOne, Microsoft Defender, Armis, and Tanium; built MITRE ATT&CK-aligned detections, CIM-compliant correlation searches, and Risk-Based Alerting to reduce false positives and improve MTTR. Developed automated asset aggregation (Python/PowerShell) and scoring models exposed in Splunk to prioritize remediation and drive coverage KPIs.

Splunk ReliaQuest GreyMatter SentinelOne Tanium Python PowerShell SIEM Tuning

Sr. Cyber Security Engineer

Occidental Petroleum Corporation

Apr 2023 - May 2025 (2 years 1 month)

Optimized Palo Alto Prisma Cloud for CSPM and implemented Thycotic IAM policies; integrated Anomali ThreatStream with QRadar and created detection rules to automate correlation and improve SOC workflows. Implemented DLP policies in Microsoft Purview and performed vulnerability scans for IT and ICS/OT environments to reduce exposure.

Prisma Anomali Threatstream QRadar Microsoft Purview Python Zscaler Nozomi

Sr. Cyber Security Consultant

ExxonMobil Corporation

Apr 2021 - Apr 2023 (2 years)

Supported incident response and threat intelligence operations by integrating Recorded Future, Anomali ThreatStream, and Splunk Phantom SOAR to automate detection and reduce response times; performed risk assessments and threat hunting across cloud and ICS/OT environments. Developed custom scripts (Python/Bash/PowerShell) to automate log parsing, detection, and compliance checks.

Threat Intelligence Splunk Recorded Future Anomali Python BASH PowerShell SentinelOne Nozomi

Infrastructure Security Engineer

Horizon Blue Cross Blue Shield of New Jersey

Apr 2019 - Apr 2021 (2 years)

Led deployment and migration to McAfee Endpoint Security and Proofpoint DLP, onboarded diverse log sources into Splunk, tuned indexer/search resources, and automated compliance reporting to meet HIPAA/HITRUST requirements. Deployed Tanium EDR and CyberArk PAM while driving vulnerability management and SOC automation with Splunk Phantom.

McAfee MVision EDR ProofPoint Splunk Tanium Nexpose Nessus BASH PowerShell

Application Security Engineer

Con Edison

Aug 2018 - Mar 2019 (7 months)

Performed SAST/DAST and penetration testing using AppScan, Checkmarx, Veracode, Burp Suite, and OWASP ZAP; integrated security testing into the SDLC and produced remediation guidance to address OWASP Top 10 and critical web vulnerabilities. Developed custom Nessus audit scripts and standardized security testing protocols.

SAST DAST IBM AppScan Checkmarx Veracode Burp suite OWASP Nessus Penetration Testing

Cyber Security Analyst

Marsh

Mar 2018 - Jul 2018 (4 months)

Deployed McAfee Endpoint and DLP, maintained QRadar SIEM dashboards, and conducted vulnerability assessments with Nessus and Rapid7 to prioritize remediation aligned with HIPAA and NIST. Investigated incidents using QRadar and McAfee ePO and automated reporting to improve SOC responsiveness.

McAfee DLP QRadar Nessus Burp suite Vulnerability Management Incident Response

IT Security Analyst

Reckister Infotech

Jan 2014 - Jul 2017 (3 years 6 months)

Managed CyberArk PAM, administered Active Directory, deployed Splunk Enterprise with distributed forwarders, and developed detection dashboards and runbooks to operationalize MITRE ATT&CK-based detections. Led upgrades, ingestion monitoring, and delivered analyst training and SOPs for incident handoffs.