At CyberionLabs Pvt. Ltd., I lead SOC and MDR operations and handle critical incidents from triage through recovery. I investigate activity across endpoint, network, cloud, and identity environments, including ransomware, credential abuse, and privilege escalation.
I lead DFIR investigations involving host, memory, and disk forensics, and deobfuscate suspicious PowerShell scripts and malware samples to identify malicious activity. Through hypothesis-driven threat hunts and purple team exercises mapped to MITRE ATT&CK, I helped close detection gaps and reduce false positives by ~40%.
I create and tune correlation rules, custom decoders, Sigma detections, and response playbooks in Splunk and Wazuh. I also build security integrations using REST APIs, webhooks, and Python, and onboard log sources from endpoint, network, identity, and cloud platforms.
Previously, at Acute Informatics Pvt. Ltd. and Infopercept Consulting Pvt. Ltd., I worked on incident response, phishing investigations, SIEM implementation, and security monitoring. I hold an M.Sc. IT (Cyber Security) from Ganpat University and a Web Application Security and Testing certification from TCM Security.
