Looking for a job

Darshan Rawal

@darshanrawal

Message

I build cost-optimized SIEM platforms and production-ready threat detections.

India

Message

What I'm looking for

I'm looking to build and scale security platforms, develop robust detection logic, research attacker TTPs, and improve enterprise visibility across endpoint, network, and cloud telemetry.

At Eventus Security, I architect and own end-to-end SIEM platforms spanning log ingestion, detection, correlation, alerting, and analytics. I led the production migration from OpenSearch to ClickHouse, reducing infrastructure costs by 70%+ while improving query performance and scalability.

I build MITRE ATT&CK-mapped detections, multi-stage attack-chain correlations, and real-time IOC matching across endpoint, firewall, proxy, WAF, and cloud logs. I also emulate attacker TTPs in lab environments to validate coverage and turn gaps into production-ready detection logic.

My work includes secure ingestion pipelines with rsyslog, RELP, TLS, Filebeat, and Kafka; endpoint-based vulnerability management using NVD CVE correlation; and white-labeled security products built for enterprise customers.

Experience

Work history, roles, and key accomplishments

Current

Security Detection Engineer / Platform Architect

Current

Eventus Security

May 2023 - Present (3 years 4 months)

Architected and owned end-to-end SIEM architecture, including log ingestion, detection, correlation, alerting, and analytics. Directed production migration from OpenSearch to ClickHouse, achieving 70%+ infrastructure cost reduction while improving query performance and scalability.