Arbaz Khan

About Arbaz Khan

I bring strong analytical skills and a passion for security and compliance. Currently working as a Security and Compliance Engineer (Technology expert) at Infosys, I specialize in managing high-priority escalations, identifying security risks, and ensuring compliance with industry standards and client requirements.My experience in security operations has sharpened my ability to investigate and resolve complex issues efficiently, while maintaining a high standard of service. I thrive in fast-paced environments where communication, critical thinking, and attention to detail are essential to success.Driven by a strong work ethic and a commitment to continuous learning, I aim to contribute meaningfully to any team or project I’m part of. If you’re seeking a dependable and skilled security professional with a proactive approach and customer-first mindset, I’d love to connect.

Experience

1. Senior Technology Analyst

   Infosys

   Aug 2025 — Present · Noida, IN

   Led end-to-end Microsoft 365 Security & Compliance initiatives across Defender XDR, Defender for Office 365, DLP, MFA, and email security, strengthening tenant security posture and reducing attack surface.• Investigated and resolved high-severity security incidents (phishing, malware, account compromise) using Microsoft Defender XDR and advanced hunting, minimizing business impact and preventing recurrence.• Reduced false positives and improved threat detection accuracy by fine-tuning Defender for Office 365 policies, Safe Links, Safe Attachments, and anti-phishing configurations.• Automated recurring security and compliance operations using PowerShell, improving response times, operational efficiency, and consistency across M365 security workloads.• Conducted deep Root Cause Analysis (RCA) for critical incidents using Fiddler, network traces, and Extended Message Trace(EMT), delivering long-term remediation and risk mitigation strategies.• Diagnosed and resolved complex mail flow and delivery issues by configuring and validating DNS, SPF, DKIM, and DMARC, improving email authentication and reducing spoofing/phishing risks.• Enforced Microsoft 365 compliance requirements through proactive auditing, Message Trace, Unified Audit Logs, and Compliance Center investigations, ensuring alignment with internal controls and regulatory standards.• Acted as a Subject Matter Expert (SME) for M365 Security & Compliance, providing guidance to cross-functional teams and supporting escalated, business-critical security cases.

Education

• Noida International University

  Bachelor of Technology - BTech, Computer Science

  2015 — 2019