Open to opportunities

Kashif 046

@kashif046

Message

I track adversaries and build intelligence-driven detections that reduce security response time.

India

Message

What I'm looking for

I'm looking to lead intelligence-driven security operations where I can track adversaries, operationalize threat intelligence into detections and response workflows, automate analysis, and publish meaningful technical research.

I've led threat intelligence and vulnerability management programs at Capgemini supporting 20,000+ assets, delivering ATT&CK-aligned detections, proactive hunts, and SOAR workflows that reduced MTTR by approximately 30%.

Previously at DXC Technology, I tracked 50+ APT and cybercriminal groups across the Middle East and APAC, conducted more than 100 investigations annually, and built Sentinel automation playbooks that reduced triage effort by 35%. I also publish technical research on phishing infrastructure and SharePoint access token theft through WebAmon.

Experience

Work history, roles, and key accomplishments

Current

Community Threat Researcher

Current

WebAmon

Jun 2026 - Present (2 months)

Collaborated with researchers on the Webamon platform to democratize threat intelligence. Shared technical research on phishing infrastructure hunting and SharePoint access token theft.

Threat Intelligence Threat Hunting Phishing OSINT Technical Research

Lead Threat & Vulnerability Intelligence Analyst

Capgemini

Nov 2025 - Jun 2026 (7 months)

Led enterprise threat intelligence and vulnerability management programs supporting 20,000+ assets. Conducted 50+ proactive hunts annually and reduced MTTR by ~30% through SOAR automation.

Threat Intelligence Vulnerability Management SOAR Python OSINT Incident Response Malware Analysis

Senior Cyber Threat Intelligence Analyst

DXC Technology

Mar 2021 - Jul 2025 (4 years 4 months)

Tracked and analyzed activities of 50+ APT and cybercriminal groups in the Middle East and APAC region. Produced strategic, tactical, and operational intelligence reports for executives and SOC leadership.

Threat Intelligence APT OSINT HUMINT GEOINT Playbooks Incident Response

Technical Support Engineer

Hewlett Packard Enterprise

Dec 2018 - Feb 2021 (2 years 2 months)

Performed root cause analysis, incident resolution, and technical support for mission-critical enterprise environments.

Root Cause Analysis Incident resolution Technical Support

Information Security Analyst

Microsoft

Monitored and investigated 500+ alerts monthly using Sentinel and Defender for Endpoint. Managed identity security controls for thousands of enterprise users via Entra ID and Conditional Access.

Entra ID Conditional Access DLP Insider Risk Management PAM CyberArk