Stephen Boyd

Senior Associate @PwC Canada

Toronto, ON, CA

Designed and deployed SOAR automation workflows covering the full incident lifecycle, including alert ingestion, enrichment, triage, response, and closure, reducing manual investigation time by 70%.• Engineered detection and enrichment pipelines integrating Google Chronicle with 15+ security tools, improving alert context and reducing mean-time-to-response (MTTR) by ~75%.• Built Python-based automation and API integrations to orchestrate enrichment, containment, and evidence collection across SIEM, EDR, cloud, and ticketing platforms.• Architected security platform integrations and log pipelines across AWS, Azure, GCP, and on-prem environments, improving detection coverage and SOC visibility.• Developed automated compliance evidence collection and reporting pipelines aligned with NIST 2.0 and SOC 2, reducing audit preparation time by 40%.• Led cross-functional engineering efforts to design and implement organization-wide detection and response capabilities embedded directly into cloud infrastructure and CI/CD workflows.• Owned end-to-end detection engineering lifecycle, from threat modeling and detection design through implementation, tuning, automation, and operational handoff.

Queen's University

Bachelor of Applied Science - BASc, Computer Engineering

Royal St. George's College

High School