Drew Sutter

Led a 24x7 SOC of 50 across managed security services for 250+ enterprise clients, owning the SOC operating model, escalation frameworks, and incident response aligned to MITRE ATT&CK. Stood up a dedicated Phishing Response Team, integrated AI into the incident handling workflow to accelerate triage and analyst write-ups, and reported security posture and MTTD/MTTR performance to internal and client executives.

Oversaw all North American SOC operations (San Diego and Columbia, SC), a Network Operations Center in Boston, and dedicated analyst teams embedded at major client sites, leading global 24x7 SOC and NOC operations for enterprise and federal clients in a follow-the-sun model.

Led ~25 analysts across multiple 24x7 SOCs delivering managed security services to public sector and global enterprise clients. Doubled the client base during tenure and transitioned all SOC operations to fully remote during COVID-19 with zero service disruption.

Led a 24x7 SOC delivering managed security services to global organizations, tripling the customer base during tenure while maintaining operational quality through sustained growth.

Delivered security consulting focused on SIEM operations, detection strategy, and incident response, including a year-long SIEM residency at a national bank. Joined as the first member of CBI's apprenticeship program and helped build the company's 24x7 SOC from its early days.