Fayyaz Naeem

Senior Cloud Security Professional with 20+ years of experience implementing enterprise security measures, leading cross-functional teams, and architecting cloud-native security solutions. Proven track record creating automations, custom solutions and reducing incident response time scripts. Managing large accounts, services and resources and driving process improvements with the creation of cli TUI tools and web-based dashboards that can improve in-house processes exponentially.

Expertise in AWS security architecture, SIEM/SOAR platforms, and AI-powered automation using inline coders.

AWS Infrastructure Security Engineer / Architect at Bio-Rad Laboratories (2021-11 – Present)

• AWS Architect and engineer full-stack custom security solutions serving all departments across 133 accounts spanning 8 regions
• Manage AWS Control Tower, Organizations, IAM Identity Center, and CIS Compliance/Security Hub configurations to enforce enterprise security standards and supported FedRAMP compliance.
• Develop automation scripts using Boto3/SDK, CDK, Python, and CloudFormation to query and modify settings across multi-account environments
• Leverage Claude CLI for AI-powered automation to accelerate security operations and process improvements
• Create and maintain SOPs, process documentation, and provide cross-departmental security support

Cyber Security Analyst III at Service Corporation International (2019-09 – 2021-11)

• Managed security incidents using CrowdStrike, FireEye, Qualys, Cisco IronPort, Proofpoint, Splunk, and Azure Data Explorer
• Developed custom process improvement program that enhanced KPI metrics across the entire security team
• Authored Incident Response playbooks for SOAR platform, reducing mean time to respond (MTTR)
• Led technology evaluation projects for new security tool implementations and configurations
• Created comprehensive onboarding documentation and training processes for new team members

Digital Security Engineer at BP (2014-10 – 2019-03)

• Configured ArcSight SIEM rules, lists, reports, and detection logic to enhance SOC monitoring capabilities
• Developed custom scripts to test defense systems' security controls by simulating access to malicious sites
• Created SOPs, use cases, and technical documentation for Security Teams
• Managed CrowdStrike Falcon, MCAS, McAfee, Cisco IronPort, FireEye, and Verodin platforms

SOC Analyst at BP (2015-10 – 2018-01)

• Improved SOC response time by automating repetitive tasks via custom scripts, increasing productivity equivalent to 2 FTEs
• Monitored and analyzed network traffic based on SIEM alerts, phishing emails, and IOCs
• Generated visualization reports identifying trends and malicious traffic patterns in security event logs
• Performed threat detection, malware analysis, and remediation using custom tools and OSINT resources
• Collaborated with CERT and Red Team on high-priority DFIR events requiring multi-team coordination

Network Administrator II at LGBS LLC (2013 – 2014)

Managed network infrastructure and led 6-person team including digital transformation project

Systems Administrator at HTI (2011 – 2013)

Supported 600+ clients with Windows Server administration and healthcare applications

Various IT Positions at IBM, Dell, Kroger, BP (1996 – 2011)

Server management (170+ servers), POS system rollouts, Active Directory migrations, hardware and software support

Bachelor of Business Administration in Management – University of Houston-Victoria (2007)