Looking for a job

DEBRAJ BASAK

@debrajbasak

Senior Security Researcher at Trellix who built a global threat-intelligence platform and created Apex, a modular C2 framework.

India

Message

What I'm looking for

I'm open to relocation to the UAE, GCC, and Southeast Asia.

At Trellix, I architected a Product Security Posture Management platform and built a global threat-intelligence platform aggregating 20+ sources. I also led MITRE ATT&CK micro-emulations and engineered EDR/XDR bypass techniques to validate detection efficacy.

I created Apex, a modular C2 framework for red team operations and adversary simulation, with 17+ EDR-evasion techniques. I also discovered and responsibly disclosed CVE-2026-82312, a local denial-of-service vulnerability in OpenVPN for Windows, which was remediated in OpenVPN 2.7.7.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Researcher

Current

Trellix

Apr 2024 - Present (2 years 7 months)

Architected a Product Security Posture Management platform integrating SAST, DAST, and SCA tooling, and built a global threat-intelligence platform on GCP BigQuery and Vertex AI. Engineered EDR/XDR bypass techniques and led 200+ MITRE ATT&CK micro-emulations to improve detection accuracy.

SAST DAST SCA Vertex AI BigQuery GCP EDR Evasion MITRE ATT&CK Threat Modeling STRIDE Model Red Teaming Adversary Emulation

Senior Associate, Cybersecurity

BDO India LLP

Aug 2023 - Apr 2024 (8 months)

Led OT/SCADA security assessments for critical-infrastructure environments and assessed Active Directory environments for misconfigurations and privilege-escalation paths. Delivered end-to-end security assessments for major PSU banks across web, Android, and iOS applications.

OT Security Active Directory Web Security Android Security iOS Security Vulnerability Assessment Penetration Testing

Security Analyst

Net Square Solutions Pvt. Ltd.

Aug 2022 - Aug 2023 (1 year)

Executed VAPT and red team engagements across web, network, Android, iOS, and IoT environments for clients across multiple industries. Performed security assessments for leading private banks, a stock exchange, automotive CAN bus systems, and healthcare hardware environments.

VAPT Red Teaming Web Security Network Security Android Security iOS Security IoT Security CAN Bus Security Cloud Security Adversary Simulation

Security Research Analyst

ISOAH Data Securities

Mar 2021 - Aug 2022 (1 year 5 months)

Conducted VAPT engagements for 8 client organizations, identifying critical vulnerabilities and reducing remediation turnaround by ~30%. Delivered cybersecurity awareness and training programs for government and private-sector organizations, including law-enforcement agencies.

VAPT Vulnerability Assessment Penetration Testing Cybersecurity Training Security Awareness