Haider Rao

At Vijilan Security, I own the full detection lifecycle for a 24/7 MSSP, designing LogScale CQL detections, investigating CrowdStrike Falcon, Entra ID, M365, and AWS CloudTrail alerts, and closing high-priority MITRE ATT&CK gaps. I also mapped 384 rules to 75 ATT&CK Navigator entries and built Falcon Fusion playbooks that automate endpoint containment.

Previously, I deployed Splunk AutoSIEM, Wazuh/ELK, QRadar integrations, OpenStack, and KYPO cyber-range environments for defense-sector training. At RapidCompute Cloud, I investigated security alerts, administered Kaspersky EDR, performed Nessus assessments, and tested defenses with Atomic Red Team.