Jagadeesh Raj

I’m an offensive security professional with 1.7 years of enterprise security experience at Ernst & Young (EY), combining SOC threat intelligence with hands-on penetration testing. I map real-world attacker TTPs to MITRE ATT&CK and drive investigations using SIEM telemetry and structured threat reports.

In my role, I triage and validate vulnerability scanner outputs (Nessus/Qualys), manually verifying exploitability to eliminate false positives and reduce remediation backlog noise by ~30%. I’ve mapped 50+ monthly security incidents (phishing, brute-force, lateral movement) and conduct threat hunting for privilege escalation, credential abuse, and suspicious lateral movement patterns.

I also strengthen my practice through lab-driven offensive work—building an Active Directory attack lab (Kerberoasting, Pass-the-Hash, DCSync, and lateral movement), an OWASP Top 10-mapped SQL injection scanner in Python, and a PowerShell post-exploitation recon tool. I’m CEH and CRTP certified and focused on turning attack-chain understanding into actionable detection and remediation outcomes.