Gavin Fellows

Principal Security Engineer @CYSIAM

GB

Leading Security Engineering & Strategic SIEM OperationsLead a team of Security Engineers delivering security operations across aerospace, defence, banking, government, and NGO clients. Managed multiple SIEM platforms simultaneously, ensuring tailored solutions met each client\'s operational and regulatory requirements.Customer Onboarding & Cross-Functional CollaborationPartnered with SOC, Sales, and Project Management teams throughout the customer lifecycle—from pre-sales consultations through technical implementation to BAU handover. Ensured seamless transitions with clear documentation and alignment to customer expectations.Cloud Infrastructure & Deception TechnologyDesigned and deployed deception infrastructure across AWS and Azure using Terraform and PowerShell. Created rapid, repeatable deployment frameworks supporting international cyber capacity building projects with overseas government partnersDetection Engineering & AutomationPioneered a \"detection-as-code\" approach with standardized naming conventions and automated deployment across multiple SIEM platforms. Built custom SOAR integrations and enrichment capabilities that reduced response times and improved detection accuracy.Platform InnovationArchitected an in-house Python-based automation platform unifying alerting from multiple SIEM technologies into a single management system. The platform handled the complete detection lifecycle—deployment, baseline filtering, version control, and alert enrichment from public and private CTI sources—with integration to custom LLM and AI tooling.Cost Optimization & Process DevelopmentReduced data ingestion costs and operational noise through Cribl Stream optimization and custom log forwarding solutions. Established foundational processes and procedures for the security engineering function, enabling team scalability and consistency.