Richard Manda

Background

About Richard Manda

I own the Microsoft security stack end-to-end. From engineering Microsoft Sentinel SIEM operations with custom KQL detections to implementing Zero Trust architectures with Entra ID, Conditional Access, and PIM/RBAC, I turn security frameworks into working systems. I've secured APIs and federated applications, embedded security testing into Azure DevOps pipelines, and operationalized Defender for Cloud CSPM to harden Azure environments at scale. My incident response isn't just reactive—I lead containment, eradication, and post-incident hardening while translating technical findings into executive-level risk narratives. I've orchestrated vulnerability management programs using Defender for Cloud and Qualys VMDR, driving remediation to closure while maintaining audit-ready evidence. On the compliance side, I've led PCI DSS audit readiness as a technical SME, built enterprise cybersecurity policies, and translated NIST 800-171, ISO 27001, HIPAA Security Rule, and CIS frameworks into practical controls that engineering teams can implement. Recent wins: Engineered Microsoft Sentinel at scale—cut false positives and accelerated threat detection Spearheaded Zero Trust implementation—eliminated standing admin access via just-in-time elevation Led State Farm's PCI DSS audit to successful completion—delivered defensible evidence on time Technical toolkit: Microsoft Sentinel (KQL), Entra ID (MFA/SSO/Conditional Access/PIM/RBAC), Azure DevOps, Defender Suite, Qualys VMDR, Intune, PowerShell Certifications: Security+, Azure Security Engineer Associate (AZ-500), CISSP (Expected Oct 2025) What I'm looking for: I'm exploring Cloud Security Architect, Cloud Security Engineer, IAM Engineer, Cybersecurity Engineer, and GRC roles where I can leverage my Microsoft security expertise and compliance background to build resilient security programs. Let's connect if you're looking for someone who speaks both security and business, can architect solutions that scale, and thrives on turning compliance requirements into competitive advantages.