Sumit Kapoor

About Sumit Kapoor

15 years in security. Not defending perimeters but building programs that think, adapt, and scale.Currently leading security response at Uber across detection, hunting, insider threat, attack surface management, adversary simulation, and intelligence functions. Before that, years at Expedia Group and Gartner across different scales, different industries, and very different threat profiles.The work that matters most has always been strategy. Not the presentation version but the kind built in partnership with the business, understanding where the organisation is heading and designing a security roadmap that enables that trajectory rather than friction it. Multi year roadmaps. Cross functional alignment. Security embedded into product and infrastructure from the start, not bolted on after.The most meaningful shift in recent years has been rethinking the operating model entirely. Agentic AI in security operations is not a future concept. It is running in production. Systems that do not just surface signals but reason through context, act autonomously on low and medium fidelity cases, and close the loop without human intervention. That changes what analysts focus on. It changes how threats are caught. It changes the economics of running a security function at scale.Built global SOC teams. Designed threat intelligence programs. Ran adversary simulation at scale. Taken security posture from reactive to predictive at organisations handling millions of users.Detection engineering anchored to MITRE ATT & CK. Security programs built on NIST CSF and ISO 27001 foundations. Risk frameworks aligned to SOX, CIS Controls, and Zero Trust architecture principles. Threat modelling, purple team exercises, and continuous control validation baked into the operating rhythm rather than treated as annual checkboxesKey SkillsSecurity Operations Leadership, Incident Response, Threat Hunting, Detection Engineering, Security Engineering, SOAR, SIEM, GenAI for Cybersecurity, Agent based Automation, End to End Security Automation, Cloud Security, Automation Strategy, Playbook Development, Metrics and KPIs, Quality Assurance and Governance, Risk Management, Stakeholder Management, Team Building and MentorshipThese initiatives have resulted in faster case resolution, improved detection quality, and scalable security operations, positioning the organization for next generation cyber defense.

Experience

1. Manager Ii

   Uber

   Feb 2021 — Present · Bengaluru, IN