Looking for a job

jaspreet singh

@jaspreetsingh19

Principal Security Researcher at Aquila-I Solutions, developing red team playbooks and adversary emulation for a homegrown BAS platform.

India

Message

At Aquila-I Solutions, I lead CTEM research and delivery across 30+ client engagements, identifying exploitable risks and prioritizing remediation across hybrid cloud and enterprise environments. I also develop red team playbooks and adversary emulation methods for a homegrown BAS platform to expose detection gaps.

Previously, at Trellix, I developed Snort IPS signatures for network threats and vulnerabilities, tuning detection quality through real attack traffic analysis. At NTT, I led incident response and threat hunting, and built SIEM detection use cases aligned with MITRE ATT&CK and the Cyber Kill Chain.

Experience

Work history, roles, and key accomplishments

Current

Principal Security Researcher

Current

Aquila-I Solutions

Dec 2023 - Present (2 years 11 months)

Spearheaded design of red team playbooks and adversary emulation methodologies for a homegrown BAS platform. Led CTEM research and delivery initiatives across 30+ client engagements, architected security validation workflows, and developed automation for alert validation and detection testing.

Senior Research Scientist

Trellix

Sep 2021 - Dec 2023 (2 years 3 months)

Developed network signatures (Snort IPS rules) and optimized detection quality by analyzing real attack traffic. Conducted vulnerability research and collaborated with engineering and PM teams to enhance detection capabilities.

Snort IPS Signature Development Protocol Analysis Attack Traffic Analysis Vulnerability Research Metasploit MITRE ATT&CK Verodin Bass Trellix Smart Vision XDR Python BASH Laboratory Environment Administration Mapp Technical Writer

Lead Senior Incident Responder & Threat Hunter

NTT

Apr 2019 - Sep 2021 (2 years 5 months)

Led major incident and breach response for enterprise and BFSI clients, coordinating SMEs for containment and restoration. Built SIEM detection use cases aligned to Cyber Kill Chain and MITRE ATT&CK, and executed BAS-driven simulations using SafeBreach.

Incident Response Threat Hunting SIEM Use Case Development Cyber Kill Chain MITRE ATT&CK SafeBreach Bass EDR SOAR DDoS IAM Identity Threat Detection and Response (ITDR)Root Cause Analysis Executive Reporting

Senior Cyber SOC Engineer

NTT

Apr 2017 - Mar 2019 (1 year 11 months)

Analyzed multi-source logs and defined SIEM use cases, improving signal quality through correlation tuning and enrichment. Performed network traffic analysis and IOC investigations across DNS, firewall, WAF, and endpoint telemetry.

SIEM Log Analysis Correlation Tuning Network Traffic Analysis IOC Analysis DNS Firewalls WAF NIDS HIDS Endpoint Arbor DDoS Mitigation POC Management

Systems Engineer

Netmonastery Security Pvt. Ltd.

Jun 2015 - Apr 2017 (1 year 10 months)

Deployed and supported DNIF and CNAM SIEM platforms for enterprise clients, building log parsing, normalization, and enrichment logic. Used big-data analytics to correlate machine data and identify suspicious network patterns.

DNIF CNAM SIEM Log Parsing Data Normalization Enrichment Big Data Analytics Network Analysis