Khan Daaniyal

I’m a cybersecurity professional with 3+ years of enterprise experience specializing in Microsoft Security ecosystems, Corporate Security Operations (SOC), and automated endpoint protection. I deploy, configure, and optimize Microsoft Defender for Endpoint (MDE), Microsoft Defender XDR, and Microsoft Intune across global multi-tenant environments.

In Tier-2 incident response, I triage high-fidelity alerts, execute proactive threat hunting using Kusto Query Language (KQL), and conduct Live Response forensics to isolate active threats. I also drive risk remediation through Threat & Vulnerability Management (TVM), secure configuration improvements, and measurable security posture enhancements mapped to MITRE ATT&CK.

As a Senior Technical Advisor, I secured a flawless, consistent 5/5 CSAT score for three consecutive months and led enterprise-scale hardening—reducing exploit exposure by 22% by architecting and testing tailored ASR rules. I bring a strong engineering mindset to incident execution, root cause analysis, and compliance enforcement through Microsoft Intune policies and Defender Security Center operations.