SOC INFRASTRUCTURE CONSULTANT & TOOL BUILDER

Securing Enterprise Networks. Engineering Custom Security Tools.

Experienced Cyber Security & Infrastructure professional supporting enterprise scale (8,000+ users), lecturing technical cyber operations at the University of West London, and independently architecting production security platforms — Sentrix, Xposr, and Lucent.

Microsoft 365 & Entra ID Sentinel KQL & Splunk Cisco & Juniper Routing UWL Lecturer (300+ Students)
8,000+
Enterprise Users
3
Shipped Tools
300+
UWL Students
8+ Yrs
IT & Cyber Ops
Amanpreet Singh Matharu
OPERATOR:Amanpreet Singh
CREDENTIALS:MSc Cyber · CCNA
SECURITY POSTURE:VERIFIED DEFENDER
Latest Launch
Lucent v1.0 (macOS)
System Telemetry
INDEPENDENT SECURITY ENGINEERING SUITE

Three Security Tools. Built End-to-End.

Production software architected, coded, and deployed independently — spanning exposure assessment, SIEM detection engineering, and native macOS storage forensics.

Xposr

EXPOSURE-ASSESSMENT PLATFORM

An independently built, verification-first exposure-assessment platform designed to turn external web, perimeter, and configuration evidence into prioritized findings and audit-ready reports.

Continuous Exposure Management: Discovers public perimeter, internal network paths, and cloud misconfigurations without DoS or spraying.
Cryptographic Proof of Concept: Findings are safe-tested with verifiable proof so engineers only fix real, proven threats.
Cyber Hygiene & Posture Scoring: Real-time hygiene grading, 0-day defense tracking, and noise filtering.
Executive Posture & Compliance Packs: Evidence-led PDF reports with framework readiness mappings.
Launch Xposr Live AppStack: Python · Docker · Cloudflare
xposr.amanpreetmatharu.com
Xposr Exposure Platform
INTERACTIVE DEFENSE-IN-DEPTH MATRIX

How I Defend Against Real Attacks.

Click on any MITRE ATT&CK tactic below to inspect the real-world telemetry, defensive controls, and detection queries I engineer in production environments.

Select ATT&CK Phase:
ATT&CK Tactic: Initial Access (TA0001)

T1078 · Valid Accounts & Phishing

Primary Tool: Sentinel
Adversary Behavior & Threat

Attempting credential replay, token hijacking, or external password spray against public tenant interfaces.

Defensive Control & Architecture

Enforcing FIDO2/MFA, Conditional Access risk-based policies, geo-blocking, and strict DMARC/DKIM/SPF alignment.

SIEM / EDR Detection Logic (KQL / SPL)
SigninLogs | where ResultType != 0 and RiskLevelDuringSignIn in ('high','medium') | summarize count() by UserPrincipalName, IPAddress
Telemetry: Microsoft Entra ID Sign-in Logs (Interactive & Non-interactive), Exchange Online message trace.Status: Hardened
VERIFIED CAREER TIMELINE

Proven Experience & Technical Leadership.

From supporting 8,000 enterprise users to lecturing Master's candidates and defending multi-tenant cloud infrastructure.

2021 – 2022
Master's Degree in Cyber Security
University of West London
Certified · 2018
Cisco CCNA Routing & Switching
Cisco Systems
Feb 2026 – Present

Cyber Security Infrastructure Consultant

GuardIQ·London, UK
employment

Multi-tenant infrastructure administration, endpoint monitoring, identity protection, and security incident response across managed customer environments.

Support 4 independent client environments serving 120+ users, covering cloud identity, endpoints, and remote technical operations.
Administer 100+ managed identities & endpoints using Microsoft 365, Entra ID, Exchange Online, Huntress EDR, and Atera RMM.
Investigate operational and security incidents through alert triage, root-cause analysis, containment, and post-remediation validation.
Maintain continuous infrastructure visibility via RMM telemetry, patch management, device-health audits, and access controls.
Microsoft 365Entra IDHuntress EDRAtera RMMIncident Triage
Jan 2023 – Present

Cyber Security Lecturer – HPL (Part-Time)

University of West London·London, UK
employment

Delivering technical cybersecurity instruction, lab development, and practical systems training across Undergraduate and Master's degree levels.

Deliver technical teaching across Levels 4–7, covering Data Communications, Security Operations (SOC), SIEM, Incident Response, and Active Directory.
Taught and mentored 300+ students, translating complex enterprise networking and security architecture into structured lessons.
Authored and delivered 20+ hands-on security labs covering network monitoring, Windows infrastructure telemetry, PowerShell scripting, and attack investigations.
Design practical assessment frameworks simulating real-world security incidents and remediation.
Teaching (Levels 4–7)SIEM LabsActive DirectoryMITRE ATT&CKPowerShell
Jun 2026 – Sep 2026

Cyber Security & Infrastructure Consultant (Contract)

Telcam Fire & Security Ltd·London, UK
contract

Production network revamp, physical rack re-engineering, and full-stack Layer 1–3 infrastructure hardening without business downtime.

Independently administered 8 switches, 3 firewalls/routers, 4 wireless access points, and 3 physical servers for 80 connected devices.
Reorganized and repatched a live production network rack without service downtime, improving physical cabling and operational uptime.
Configured secure network segmentation, VLANs, TCP/IP, DNS, DHCP, VPN access, and firewall policies.
Managed Windows Server and Active Directory infrastructure, including Group Policy, account lifecycle management, and recovery procedures.
Cisco / FirewallsLive Rack RepatchVLANs & RoutingActive Directory
Jun 2018 – Mar 2020

Associate IT

Nagarro·Enterprise Operations
employment

Enterprise IT operations within a high-velocity team supporting 8,000 employees across six corporate sites and global remote staff.

Administered day-to-day operations for Cisco switches, routers, VLANs, Wi-Fi APs, and Windows Server infrastructure.
Diagnosed and resolved enterprise user, network, and identity issues across physical connectivity, IP routing, and enterprise authentication.
Monitored network and systems availability using Icinga, PRTG, and Splunk for rapid fault isolation.
Led enterprise workstation deployments and physical infrastructure provisioning.
8,000 Users ScaleCisco Routing & SwitchingSplunk & PRTGIcinga
Mar 2018 – Jun 2018

IT Engineer

System 3 Enterprise Limited·United Kingdom
employment

Network hardware provisioning, structured cabling, and server installation.

Configured Cisco routers and switches (IP addressing, routing protocols, VLANs, and physical connectivity).
Assembled and maintained physical servers running Windows Server 2008 and 2012.
Executed structured cabling, RJ45 termination, patch panel organization, and rigorous cable testing.
Physical InfrastructureCabling & PatchingWindows ServerCisco
OPERATIONAL CAPABILITY & TOOLING

Technical Arsenal Across the Security Lifecycle.

Hands-on enterprise expertise spanning physical Layer 1 infrastructure up to cloud identity governance and native software engineering.

SIEM & Security Monitoring

Splunk (SPL)
Microsoft Sentinel (KQL)
Log Analysis & Triage
Event Correlation
MITRE ATT&CK Mapping
Icinga & PRTG Monitoring

Endpoint Security & EDR

Huntress EDR
Microsoft Defender for Endpoint
Atera RMM
Host Isolation & Remediation
Device Health Auditing
Patch Management

Networking & Layer 1–3

Cisco & Juniper Switching
VLANs & Subnetting
Firewalls & VPNs
TCP/IP, DNS, DHCP Routing
Structured Cabling & Rack Patching
Wireshark & Nmap Analysis

Identity & Cloud Governance

Microsoft Entra ID (Azure AD)
Microsoft 365 & Exchange Online
Active Directory & Group Policy
MFA & Conditional Access
Role-Based Access Control (RBAC)
Least Privilege Architecture

Systems Administration & DevOps

Windows Server (2008–2025)
Linux (Ubuntu, Debian)
Hyper-V Virtualisation
Docker Containers
Cloudflare Security & CDN
Root Cause Analysis

Software Engineering & Scripting

PowerShell Scripting
Swift 6 & SwiftUI (macOS Native)
Python 3
Next.js / TypeScript
Tailwind CSS
Bash / Shell Automation
ESTABLISH SECURE COMMS

Let's Build, Secure, or Collaborate.

Open to senior cyber security roles, infrastructure consulting engagements, and technical product discussions.

Direct Channels

Direct communication with zero intermediary delays.

Primary Email
singhamanpreet4k@gmail.com
Telephone (UK)
+44 7935 929550
London, UK · Hybrid / Remote

Transmit Technical Enquiry

Connected to Netlify Forms with instant alert dispatch.