Girish Hb

Senior AI Security Architect with 11+ years in SOC, AI/ML security, and enterprise governance. Led AI security solutions, frameworks, and threat detection, reducing MTTR by 60% and false positives by 45%. Expert in LLM threat modeling, RAG pipelines, and AI compliance.

Lead Security Architect - Cloud & AI Security | SOC Lead at Lennox International (Fortune 500 HVAC) (2024-08 – Present)

• Built enterprise AI Security governance and policy standards covering LLM threat modeling, Generative AI security, adversarial ML defense, and RAG pipeline hardening - aligned to OWASP LLM Top 10, NIST AI RMF, and ISO 42001; secured all enterprise GenAI deployments.
• Engineered production RAG pipeline on Azure OpenAI GPT-4 + Azure AI Search integrated with Splunk ES and Sentinel - automated alert triage, reducing investigation time from 5 minutes to 90 seconds (70% efficiency gain) through AI-powered automation.
• Designed prompt injection prevention controls, model integrity verification workflows, and poisoning mitigation playbooks; integrated AI security telemetry into Sentinel and CrowdStrike XDR to detect LLM misuse and data exfiltration attempts.
• Established sanctioned AI model catalog, shadow-AI detection workflows, and enterprise AI approval pathways aligned to AI policy, ISO 42001, and EU AI Act compliance frameworks.
• Conducted AI security red team exercises, tested LLM vulnerabilities, and implemented output safety guardrails for enterprise AI deployments; aligned to MITRE ATLAS framework.
• Integrated Microsoft Sentinel and Splunk SIEM; authored 40+ custom KQL analytics rules with AI-powered anomaly detection - cut MTTR by 60% and false positives by 45%; built SOAR playbooks via Logic Apps reducing manual SOC intervention by 40%.
• Designed Azure Zero Trust with Microsoft Entra ID, PIM, Conditional Access, and microsegmentation for AI workloads ensured ISO 27001 and NIST CSF compliance across cloud and hybrid environments.
• Operationalised Cloud Security Posture Management via Microsoft Defender for Cloud across 200+ Azure resources; enforced CIS Benchmark, NIST SP 800-53, and PCI-DSS through Azure Policy automation reduced cloud misconfigurations by 60%.

Senior Cyber Security Specialist at Ramboll (Global Engineering & Consulting) (2020-01 – 2024-08)

• Led SOC blue team operations; developed SOPs and runbooks for security event handling, incident triage, and escalation workflows across the organisation.
• Designed and enforced anti-phishing, spoofing prevention, and DLP policies alongside network segmentation rules significantly reduced email-borne threat exposure.
• Defined and built SIEM detection use cases mapped to MITRE ATT&CK framework; improved detection coverage across lateral movement, privilege escalation, and data exfiltration TTPs; evaluated AI-driven security solutions for enterprise deployment.
• Deployed and managed Microsoft Defender for Endpoint; led detection tuning and coordinated end-to-end IR lifecycle (detection, containment, eradication, recovery).

SOC Analyst L2 at Security Operations Center (2016-01 – 2020-01)

• Performed structured triage and deep investigation of security incidents; escalated confirmed threats with forensic context and actionable remediation recommendations.
• Helped build an internal AI-powered chatbot pre-loaded with ticket knowledge base to assist L1 analysts with faster incident classification and response guidance; early exposure to AI solutions in cybersecurity operations.
• Executed scheduled scans across VM-phase servers; tracked findings through remediation lifecycles and reported risk posture to executive management.
• Identified 20+ phishing & ransomware threats via Wireshark/Zeek analysis; hardened 500+ endpoints and reduced zero-day exposure by 60% through structured patch management.

Senior IT Analyst at Sutherland Global Services (2015-11 – 2016-01)

• Monitored security alerts, performed initial triage, and escalated high-priority incidents to L2/L3 teams; maintained SLA compliance for incident response times; integrated AI-driven alert classification and automated response playbooks aligned to NIST AI RMF and ISO 27001 standards.
• Supported deployment and configuration of endpoint protection, SIEM collectors, and vulnerability scanners; documented standard operating procedures for SOC workflows; evaluated AI security tools and RAG-based automation solutions for enterprise deployment.

Master of Business Administration (MBA) in Information Security & Business Strategy – Bharathidasan University (2014)

Bachelor of Business Administration (BBA) in Administration & Information Technology – University of Madras (2011)