BG.

Senior Information Security Analyst

Binu
Gopi.

Cybersecurity Operations · SOC · VAM · Incident Response

Results-driven cybersecurity professional with 16+ years of progressive experience protecting enterprise and critical-infrastructure environments across security operations, vulnerability management, incident response, digital forensics, endpoint security and threat intelligence.

01 · About

Security-minded. Operations-focused.

I specialize in turning security telemetry, vulnerability intelligence and incident data into practical risk-reduction actions. My background combines hands-on technical security with SOC leadership, stakeholder coordination, security assessments and continuous improvement.

01

Critical Infrastructure

Security operations experience within the oil & gas sector and K-Sector environment.

02

Security Operations

24/7 monitoring, incident lifecycle management, escalation, playbooks and SOC improvement.

03

Risk Reduction

Risk-based vulnerability prioritization, remediation coordination and security-control improvement.

02 · Expertise

Cybersecurity capabilities

SOC

Security Operations

SOC operations, event monitoring, triage, escalation, runbooks and analyst oversight.

VAM

Vulnerability Management

Qualys VMDR, Nessus, CVSS prioritization, remediation tracking and validation.

IR

Incident Response

Triage, containment, eradication, recovery and post-incident review.

DF

Digital Forensics

Memory/disk artifact analysis, malware triage, sandboxing and IOC extraction.

EDR

Endpoint Security

EDR/XDR, device control, application whitelisting, endpoint policy and hardening.

TI

Threat Intelligence

Threat feeds, IOC operationalization and proactive campaign analysis.

Qualys VMDRTenable NessusLogRhythmSecureWorksCortex XDRCarbon Black EDRIvantiLumensionProofpointCofense ReporterExtraHop NDRWiresharkAnomaliRecorded FutureZeroFoxVirusTotalAny.Run

03 · Career

Professional journey

Progressive growth from infrastructure support to enterprise information security and cybersecurity operations.

Dec 2021 — Present

Information Security Analyst

Kuwait Oil Company
  • Lead daily 24/7 SOC operations and oversee L1/L2 analyst activities.
  • Execute vulnerability assessments using Qualys VMDR and Nessus; prioritize with CVSS and coordinate remediation.
  • Lead incident response, digital forensics, malware triage and IOC extraction.
  • Coordinate threat-intelligence sharing and administer enterprise security platforms.
  • Conduct security risk assessments, POC evaluations and security awareness activities.
Feb 2021 — Dec 2021

Cyber Security Analyst

Kuwait Oil Company
  • Monitored high-volume SIEM events and investigated anomalous and multi-stage attack activity.
  • Managed incident documentation, escalation, remediation and reporting.
  • Built detection use cases and onboarded Windows, Linux, Solaris and network log sources.
Oct 2016 — Jan 2021

Information Security Engineer

Kuwait Oil Company
  • Owned enterprise endpoint-security administration across thousands of endpoints.
  • Managed application whitelisting, device control, patch/power management and antivirus policy.
  • Investigated endpoint incidents and supported vulnerability management, audits and security testing.
Jun 2013 — Sep 2016

IT Engineer

La'Ala Al-Kuwait Real Estate Co. K.S.C.
  • Administered Windows/Linux servers, VPN, backup/recovery, hardening, access control and patching.
May 2011 — Apr 2012

Customer Support Executive

Day Begins Engineering Innovations Pvt Ltd., India
Nov 2009 — Apr 2011

Hardware Customer Support Engineer

Cyber Systems, India

04 · Security Portfolio

Core focus areas

VULNERABILITY MANAGEMENT

Enterprise VAM

Qualys VMDR and Nessus assessments, CVSS prioritization, remediation coordination and re-scanning.

Qualys · Nessus · CVSS
SOC & SIEM

Security Monitoring

LogRhythm and SecureWorks monitoring, log-source onboarding, correlation and detection use cases.

SIEM · Detection
ENDPOINT SECURITY

Defensive Endpoint Operations

Endpoint policy, device control, application whitelisting, EDR/XDR and security hardening.

Ivanti · Cortex XDR · EDR
INCIDENT RESPONSE

Threat Investigation

Incident triage, containment, malware analysis, forensics and IOC operationalization.

IR · Forensics · Any.Run
THREAT INTELLIGENCE

Energy-Sector Threat Intel

Cross-sector intelligence sharing and operationalization of threat feeds for proactive defense.

Anomali · Recorded Future · ZeroFox
SECURITY AWARENESS

Security Culture

Security awareness and phishing-simulation feedback loops designed to improve user vigilance.

Awareness · Phishing

05 · Credentials

Certifications & education

CISM

Certified Information Security Manager

ISACA · Oct 2024

ISO

ISO 27001 Lead Auditor

ISLA/23/IN/434 · Aug 2023

CEH

Certified Ethical Hacker v10

ECC6521403897 · Sep 2019

CCNA

Cisco Certified Network Associate

Jul 2014

MCSE

Microsoft Certified Solutions Expert

Jun 2014

MCP

Microsoft Certified Professional

Jun 2011

EDUCATION

B.E. — Computer Science

Vinayaka Missions University, India · 2009

EDUCATION

Computer Application (VHSE)

Government of Kerala, India · 2005

06 · Contact

Let's connect.

For cybersecurity opportunities, professional networking or collaboration, reach me through email, LinkedIn or WhatsApp.