Looking for a job

Madan Devaiah

@madandevaiah

Message

I lead SOC and MXDR defenses to reduce cyber risk.

United Arab Emirates

Message

What I'm looking for

I’m looking to lead SOC/MXDR and incident response teams, govern security operations, and deliver measurable detection improvements—while maintaining strong compliance and clear stakeholder communication to safeguard digital assets.

I’m a security professional with 12+ years in cyber defense, security operations, incident management, and security solutioning. I focus on turning complex alerts into clear action through strong SOC governance, evidence-led incident response, and continuous detection improvements.

Currently as a Manager for MXDR and SOC at SISA Infosec (Sharjah, UAE), I oversee and govern security operations and SOC teams while handling client requirements. I serve as the escalation point for complex cases, support incident response activities (evidence collection, documentation, communications, and reporting), and ensure timely governance across multiple clients.

Previously at Geidea Payments, I led Monitoring & DFIR activities for the UAE and Egypt region, supervising an MDR provider and driving efficiency through fine-tuning of detection capabilities. Before that, I strengthened security posture at Crescent Petroleum using LogRhythm and worked across compliance, risk identification, escalated incident handling, and cloud infrastructure security.

My background also includes roles at Coinhaven, Wells Fargo, IBM Security, and Cognizant—covering AWS security, breach monitoring, risk and vulnerability management, and L3 investigations with QRadar. I bring hands-on expertise across QRadar, Splunk, EDR/NDR/XDR tooling, DLP, WAF/firewalls, email security, and threat monitoring, alongside certifications like CISSP, CTIA, CNSS, and CCNA.

Experience

Work history, roles, and key accomplishments

Current

Manager, SOC-MXDR

Current

SISA Infosec

Sep 2025 - Present (9 months)

Oversee SOC and MXDR operations, serving as an escalation point for complex alerts and incidents. Lead incident response support, client onboarding (cloud and on-prem), and governance to ensure compliance and timely reporting.

Security Operations SOC Management Incident Response SOP Development Client Onboarding Security Governance

Current

SOC-MXDR Manager

Current

Sisa Infosec

Sep 2025 - Present (9 months)

Serves as an escalation point for complex/unusual alerts, cases, and incidents while overseeing SOC and MXDR operations. Supports incident response through evidence collection, documentation, communications, and timely client governance and reporting.

Incident Response Client Onboarding SOP Development Compliance Reporting

Security Defense Senior Lead

Geidea Payments

Jul 2024 - Jun 2025 (11 months)

Led security monitoring, digital forensics, and incident response (DFIR) for the UAE and Egypt region. Supervised the MDR provider for detection fine-tuning, implemented security best practices via gap assessments, and ensured compliance while managing vendors and tool deployments.

Security Monitoring DFIR Incident Response Detection Engineering Security Assessments Compliance Management Vendor Management

SOC Analyst

Crescent Petroleum

May 2023 - Jul 2024 (1 year 2 months)

Served as the main SOC contact, overseeing security posture using LogRhythm and managing escalated incidents for resolution. Mitigated compliance issues and security risks using EDR and SIEM, and maintained cloud infrastructure security to strengthen the organization’s overall security posture.

LogRhythm SIEM Operations EDR Management Cloud Security Compliance Risk Assessment Security Configuration Changes

Security Operations Center Analyst

Crescent Petroleum

May 2023 - Jul 2024 (1 year 2 months)

Managed SOC operations and security posture using LogRhythm, acting as the main contact for escalated incidents. Supported compliance and security risk mitigation using EDR, SIEM, and Microsoft Purview, and maintained cloud infrastructure security.

SOC Operations Escalations EDR SIEM Microsoft Purview Cloud Security Security Risk Management

Cyber Security Officer

Coinhaven

Jul 2022 - May 2023 (10 months)

Owned Coinhaven’s information security posture and implemented native AWS security controls to protect critical assets and data. Managed breach monitoring and incident response planning/testing, vulnerability management, risk management, compliance/regulatory coordination, and acted as the security point of contact.

AWS Security Incident Management Incident Response Vulnerability Management Risk Management Regulatory Compliance

Senior Information Security Engineer

Wells Fargo

Jul 2021 - Jul 2022 (1 year)

Worked with Wells Fargo California sites to deliver continuous monitoring and detection services. Served as India site lead for a team of 12 handling major incidents and escalations, managing IT security policies, breach management, recovery procedures, training, and audits.

Major Incident Management Security Operations Monitoring Security Policies Breach Management Audit & Compliance Change Management

Security Consultant

IBM Security

Dec 2016 - Jun 2021 (4 years 6 months)

Led SOC investigations for global clients across U.S. and EMEA regions using QRadar and QRoC. Maintained QRadar health and uptime, managed security infrastructure and reporting, developed asset-creation documentation, and validated security advisories and emerging threats.

QRadar Offense Handling Correlation Tuning Client Reporting

Senior Security Analyst

Cognizant

Feb 2014 - Nov 2016 (2 years 9 months)

Monitored security logs and activity using QRadar and McAfee Nitro, including firewall, endpoint, service logs, and user access changes. Investigated and triaged incidents, coordinated vulnerability management and patching, and improved detection quality by reporting false positives and tuning alerts.

QRadar McAfee Nitro Triage Vulnerability Management Detection Tuning Security Monitoring

Education

Degrees, certifications, and relevant coursework

Udacity

Enterprise Security Nanodegree, Computer and Information Systems Security / Information Assurance

2023 - 2033

Completed the Udacity Enterprise Security Nanodegree program focused on enterprise security engineering, including network and data security, endpoint protection, and application security.