Faizan Khan

About Faizan Khan

Cyber Security professional with 10+ years of experience in designing, implementing, and managing enterprise-scale Security Operations (SOC), SIEM, and SOAR programs across banking, telecom, and large enterprise environments.Currently working as a Principal Consultant – Cyber Security, leading SOC automation initiatives with hands-on experience in Palo Alto Cortex XSIAM, XSOAR, and XDR platforms. My work focuses on building automation-driven security operations, integrating multi-vendor technologies, and developing detection strategies that improve threat visibility and accelerate incident response.My experience spans end-to-end security transformation — from architecture design and log engineering to automation development and operational leadership. I have delivered large-scale deployments, developed incident response playbooks, and optimized SOC processes to improve efficiency, scalability, and overall security posture for enterprise customers.Core Areas:• SOAR & SIEM Strategy and Implementation• SOC Operations & Security Automation• Detection Engineering & Threat Use Case Development• Palo Alto Cortex XSIAM / XSOAR / XDR• Multi-Vendor Security Integration (EDR, NGFW, Cloud, WAF, Proxy)• Incident Response & Playbook Automation• Python-based Automation for Security Operations• Log Ingestion, Normalization & Security Analytics• Security Architecture & ConsultingI am passionate about building modern SOC capabilities that combine automation, intelligence, and operational excellence to reduce risk and strengthen organizational resilience.Open to leadership, architecture, and consulting opportunities in Cyber Security, SOC Transformation, and Security Automation.

Experience

1. Principal Consultant Cyber Security

   Black Box

   Jun 2025 — Present · Navi Mumbai, IN

   Principal Consultant Cyber Security – Global SOCBlack Box Limited | June 2025 – PresentWorking as a Principal Consultant in the Global SOC, leading SOAR operations, SIEM implementation, and cybersecurity solution delivery for enterprise customers. Responsible for overseeing daily SOAR platform operations while driving SIEM onboarding, architecture design, and security solution integration to enhance threat detection and incident response capabilities across client environments.Leading the design and development of Incident Response (IR) playbooks to automate and standardize security workflows, improving operational efficiency and reducing manual efforts. Designing and implementing custom automation solutions using Python to integrate multiple security tools and streamline SOC processes.Actively involved in SIEM implementations, including log source onboarding, normalization, correlation rule development, and integration with security technologies such as EDR, firewalls, cloud platforms, and third-party tools to provide centralized monitoring and visibility. Working across endpoint, network, and cloud security solutions to deliver comprehensive and scalable security architectures aligned with customer requirements.Managing end-to-end customer engagements from requirement gathering, solution architecture, implementation planning, deployment, and post-production support. Collaborating with sales and pre-sales teams to position SIEM and SOAR solutions, deliver technical presentations, and support business initiatives.Producing technical documentation including HLD, LLD, SOPs, architecture designs, and runbooks to ensure successful deployment and operational sustainability while driving continuous improvements in automation, detection coverage, and SOC maturity.

Education

• Maharaja Agrasen Himalayan Garhwal University

  BSC IT, Information Technology