SYS.CV // ONLINE SECTOR: DXB 25.2048N 55.2708E UPLINK: STABLE 0x444F45
REF 0x4A44-77
GRID 40R CN 12 84
CLR: BLUE-TEAM

Minerva McGonagall

DEFENSIVE SECURITY ENGINEER · BLUE TEAM LEAD
LOCDubai, UAE COMm.mcgonagall@example.com TEL+971 55 000 5501 NETminervamcgonagall.example.com

Operator Profile

0x01 // SUMMARY

I have spent 9 years on the defensive side, the last 4 leading a blue team of 7 analysts. My main result to date: mean time to detect went from 14 hours to 40 minutes across two SOC rebuilds. I have run 60 tabletop exercises, and I still think the whiteboard is the most underrated detection tool we own.

MTTD 14H > 40MIN 60 TABLETOPS RUN TEAM OF 7 OSCP CERTIFIED

Mission Log

0x02 // EXPERIENCE
Blue Team Lead FALCONGATE SYSTEMS 2021 – PRESENT
  • Rebuilt the detection pipeline around 340 curated rules; cut mean time to detect from 14h to 40min over 18 months.
  • Lead a team of 7 analysts across two shifts covering a 4,200-endpoint estate in 3 countries.
  • Ran 28 tabletop exercises with executives and engineering; 19 findings converted into funded remediation work.
Senior SOC Analyst DUNEHARBOR LOGISTICS 2019 – 2021
  • Triaged an average of 90 escalations per week; brought false-positive rate down from 61% to 22% by rewriting the top 50 rules.
  • Built the ransomware playbook used in a live incident in 2020: containment in 47 minutes, zero data loss.
Security Analyst QAMAR TELECOM 2017 – 2019
  • Monitored SIEM for a 12M-subscriber network; authored 60 detection rules for SS7 and billing-fraud patterns.
  • Delivered quarterly phishing simulations to 3,000 staff; click rate fell from 24% to 8% in two years.

Telemetry

0x03 // METRICS
40min
Mean time to detect
60
Tabletop exercises
4,200
Endpoints covered
9yr
Field time

Loadout

0x04 // SKILLS
DETECTION ENG
INCIDENT RESP
SIEM / SIGMA
THREAT HUNTING
PYTHON / KQL
CLOUD SEC (AZ)

Credentials

0x05 // CERT+EDU
OSCP Offensive Security Certified ProfessionalACQUIRED 2020 · REF OS-0x2F41
GCIH Certified Incident HandlerACQUIRED 2018 · REF IH-0x1B07
EDU B.Sc. Computer Science GULF INSTITUTE OF TECHNOLOGY · 2013 – 2017 · INFOSEC TRACK