Cyber Security Lead
Rini Vishwas
Security expertise. Connected.Cyber Security Lead
Security expertise.
A leadership perspective.
SOC operations, incident response and threat intelligence. Cloud and endpoint security, Zero Trust, SASE and DLP. Dark web monitoring, digital brand protection and malicious domain takedowns.
About me
I lead alert triage and investigations across endpoint, identity, email, network and cloud environments. I oversee containment, remediation, recovery, root-cause analysis and stakeholder communication. I also guide analysts through complex incidents and escalation decisions.
My experience includes CrowdStrike Falcon and SentinelOne; Zero Trust and Secure Access Service Edge (SASE) controls with Zscaler ZIA/ZPA and Netskope; and security administration across Microsoft Azure, Microsoft 365 and Google Workspace (formerly G Suite). I work with IAM, SSO, MFA, endpoint policies, vulnerability remediation and data loss prevention (DLP) controls.
I conduct dark web monitoring and investigate leaked credentials, phishing, malicious domains and brand impersonation. My digital brand protection work includes malicious domain and fraudulent website takedowns. I coordinate evidence and response with registrars, hosting providers, vendors and internal stakeholders. The platforms I use include Resecurity, Red Points and Memcyco.
I conduct web application vulnerability assessments, coordinate patching and remediation and support email authentication and web protection. My tools include PortSwigger Burp Suite, Beagle Security, ManageEngine, PowerDMARC and Cloudflare. I review security dashboards, incident findings and operational metrics to improve response procedures and inform risk decisions.
I mentor SOC analysts, work with technical teams and security partners and translate investigation findings into clear actions for management. My focus is practical security: understanding threats, strengthening controls and connecting day-to-day operations with business priorities.
I lead alert triage and investigations across endpoint, identity, email, network and cloud environments. I oversee containment, remediation, recovery, root-cause analysis and stakeholder communication. I also guide analysts through complex incidents and escalation decisions.
Experience
2026Aug 2026 — Present
Leading security operations, incident response, endpoint and cloud protection and digital risk management in the trading industry.
FP Markets2024Oct 2024 — Aug 2026
Progressed from cybersecurity engineering into a security leadership role at FP Markets (First Prudential Markets).
FP Markets2021Oct 2021 — Sep 2024
Built a technical foundation in cybersecurity, with experience in phishing site detection and reporting at FP Markets (First Prudential Markets).
Current roleCyber Security Lead
Aug 2026 — PresentFP MarketsOct 2024 — Aug 2026Cyber Security Lead
Oct 2024 — Aug 2026FP MarketsOct 2021 — Sep 2024Cyber Security Engineer
Oct 2021 — Sep 2024Swipe or tap to explore
Skills
Skills across my engineering and leadership roles, spanning security operations, incident response, digital risk protection, cloud security and identity.
62 of 62 skills
Cyber Security Lead · Role & responsibilities
My work connects SOC operations and incident response with Zero Trust, data protection, threat intelligence and digital brand protection. Explore my focus areas below.
I support secure access and data protection across cloud, identity and endpoint environments.
Implement secure access controls with Zscaler ZIA/ZPA and Netskope, including ZTNA, CASB, secure web gateways and cloud application controls.
Support IAM, SSO, MFA and password security with OneLogin, JumpCloud and 1Password.
Secure Microsoft Azure, Microsoft 365 and Google Workspace; support DLP policies and cloud security administration.
I lead alert triage, investigations and response across endpoint, identity, email, network and cloud environments.
Guide analysts through critical alerts, escalation decisions and complex investigations.
Manage CrowdStrike Falcon and SentinelOne, including endpoint isolation, security policies, remediation and recovery.
Assess applications with Burp Suite and Beagle Security, coordinate remediation and patching with ManageEngine and monitor service health.
My threat intelligence work connects external threats with practical investigation and response.
Investigate leaked credentials, phishing, indicators of compromise and malicious domains using threat intelligence and OSINT.
Investigate brand impersonation and fraudulent websites with Resecurity, Red Points and Memcyco.
Coordinate evidence and takedown response with registrars, hosting providers, vendors and internal stakeholders.
I connect technical investigations with team development, stakeholder communication and business priorities.
Oversee containment, eradication, recovery, root-cause analysis and reporting; authorize critical response actions.
Mentor SOC analysts, review alert classifications, strengthen escalation procedures and guide complex investigations.
Manage security vendors, communicate operational risks and contribute to security strategy, architecture, policy and business continuity.
From readiness to recovery
A practical overview of how security leadership connects each stage. Select a step to learn more.
Explore the NIST Cybersecurity FrameworkDefine owners, escalation contacts and response playbooks. Exercise them before an incident occurs.
A conversation starts here.