Kashif Ameen

Sentinel-focused Security Engineer with hands-on experience across SIEM engineering, detection tuning, log onboarding, and security tooling support. Skilled in Microsoft Sentinel, Cisco AMP, LogRhythm, Tenable, ExtraHop, Netskope and Proofpoint. Strong background mapping detections to MITRE ATT&CK, developing use cases, maintaining SIEM health, and improving detection fidelity.

Communicates effectively with technical and non-technical stakeholders and delivers high-quality documentation, engineering support, and operational improvements.

Cyber Security Engineer at Capgemini (2025-09 – Present)

• Delivered engineering support for Microsoft Sentinel, ensuring reliable connector performance, log ingestion, and SIEM platform stability.
• Mapped Sentinel analytics rules to MITRE ATT&CK and performed continuous detection tuning.
• Onboarded, validated, and enriched log sources; resolved ingestion failures, API errors, and data pipeline issues.
• Performed Tenable vulnerability scans and supported remediation workflows.
• Provided engineering support across Proofpoint, Netskope, Cisco AMP, and LogRhythm.
• Troubleshot sensor failures, ingestion disruptions, and connector authentication issues.
• Created documentation for engineering changes, tool configurations, and troubleshooting guides.

Team Lead – Security Operations (SOC) at Capgemini (2024-07 – 2025-09)

• Led SOC operations, ensuring effective escalations and high-quality investigations.
• Developed and maintained IR playbooks and SOPs.
• Conducted advanced investigations using Sentinel, AMP, and ExtraHop.
• Managed third-party compromise incidents and coordinated with stakeholders.
• Delivered incident reports and risk summaries to leadership.

Security Analyst at Capgemini (2023-08 – 2024-07)

• Investigated security alerts across Sentinel, AMP, LogRhythm, Darktrace, and ExtraHop.
• Analysed phishing, malware, endpoint, and network events.
• Identified third-party compromise cases and documented findings.