Open to opportunities

Digvijay Singh

@digvijaysingh3

Message

I hunt threats and build detection capabilities across SIEM, EDR, and threat intelligence platforms.

India

Message

What I'm looking for

I'm looking to continue leading proactive threat hunting, detection engineering, incident investigation, and intelligence-driven security operations across SIEM, EDR, and cloud security environments.

At Network Techlab India, I lead proactive IOC-based threat hunts across enterprise environments, engineering detection rules in XSIAM, Seceon, and CloudSEK while evaluating CrowdStrike EDR coverage against MITRE ATT&CK.

I've investigated incidents through large-scale log analysis, KQL, SQL, Splunk SPL, Lucene, threat intelligence, and attribution context, supporting clients with more than 2,000 endpoints. Previously, I triaged SIEM alerts, tuned detections, and produced incident reports, threat advisories, and risk assessments.

I've also built investigation-focused tools, including a Python CDR Analysis Tool for Gurugram Police, a BERT-based MITRE ATT&CK TTP mapper, and Telegram OSINT and forensic recovery tools.

Experience

Work history, roles, and key accomplishments

Current

Threat Hunter

Current

Network Techlab India Ltd (NTIPL)

Aug 2025 - Present (1 year)

Lead proactive IOC-based threat hunts across enterprise networks, engineered SIEM detection rules in XSIAM, Seceon and CloudSEK, reducing false-positive rates. Evaluated CrowdStrike EDR coverage against MITRE ATT&CK TTPs and delivered gap analysis to security engineering.

Threat Hunting IOC Analysis XSIAM CloudSEK Crowdstrike SQL Lucene Detection Engineering Threat Intelligence

SOC Analyst (Executive)

Network Techlab India Ltd (NTIPL)

Feb 2025 - Jul 2025 (5 months)

Triaged daily alerts via Seceon SIEM, fine-tuned CloudSEK tenant detections to cut analyst toil and reduce MTTD/MTTR. Delivered detailed incident reports, threat advisories, and risk assessments to stakeholders.

SIEM CloudSEK Incident Response Log Analysis Threat Intelligence Reporting

DFIR Intern

DFIR IIMT | Cyber Investigative Intern - Gurugram Police

Jun 2024 - Aug 2024 (2 months)

Conducted CDR/IPDR analysis, dark web investigations, email forensics, and steganographic image analysis to support cyber investigations and attribution. Built a Python CDR Analysis Tool for Gurugram Police.

Digital Forensics Incident Response CDR IPDR Analysis Steganography Python