Open to opportunities

Dhruv Singh

@dhruvsingh5

Message

I hunt threats across enterprise telemetry and turn findings into actionable detection and remediation.

India

Message

What I'm looking for

I'm looking to continue hands-on threat hunting and security operations work where I can investigate enterprise telemetry, improve detections, validate findings with stakeholders, and deliver practical remediation.

At Tata Consultancy Services, I deliver intelligence-led threat hunts across Microsoft Sentinel, Defender XDR, and CrowdStrike Falcon, building hypothesis-driven use cases and custom KQL queries across 90 days of telemetry. I investigate covert tunneling, remote-access tooling, credential leaks, ransomware mentions, domain abuse, and underground activity, then translate findings into remediation guidance.

I've also performed VAPT for client web applications at Qseap Infotech, identifying SQL injection and XSS issues before production deployment. I build detection-focused projects around TEMP.Hex/SOGU tradecraft and ransomware behavior, and publish threat research and vulnerability findings on Medium.

Experience

Work history, roles, and key accomplishments

Current

Threat Hunter

Current

Tata Consultancy Services

Jul 2025 - Present (1 year 2 months)

Developed and executed 15+ hypothesis-driven hunting use cases using 100+ custom KQL queries across Microsoft Sentinel, Defender XDR, and CrowdStrike Falcon. Validated findings with stakeholders, conducted weekly technical walkthroughs, and authored structured client-facing hunt reports with MITRE ATT&CK mappings and remediation guidance.

Microsoft Defender Threat Hunting Threat Intelligence Python PowerShell