Leads the endpoint defense function across Cortex XDR, Microsoft Defender for Endpoint, Trend Micro, and related tooling. Owns endpoint coverage, policy tuning, telemetry quality, platform integration, incident containment support, automation, security KPIs, and team development. Partners with Cyber Defense and SIEM/SOAR teams to improve prevention, detection, remediation, and operational consistency across a heterogeneous endpoint fleet.

Leads strategic workforce and capacity planning by translating business demand forecasts into short- and long-term plans. Analyzes workload, utilization, supply and demand trends, develops forecasting models and scenarios, tracks actual capacity against plan, and communicates risks and variances to leadership. Partners with HR, Finance, and business stakeholders on planning cycles, reporting, data quality, and continuous process improvement.