Looking for a job

santosh elumalai

@santoshelumalai

Message

Cyber threat intelligence analyst at Nike India Technologies turning adversary research into detection opportunities.

India

Message

At Nike India Technologies, I investigate nation-state, financially motivated, ransomware, phishing, and advanced threat campaigns with potential impact to enterprise, cloud, and supply-chain environments. I map adversary behavior to MITRE ATT&CK and translate intelligence into prioritized hunting and detection opportunities.

I partner with Detection Engineering and Cyber Defense teams on TTP-focused use cases, including Sigma-based detection concepts and threat-hunting hypotheses. I also improve ThreatConnect workflows for intelligence ingestion, enrichment, and dissemination.

At CYFIRMA, I led strategic and operational threat intelligence engagements for global enterprise customers. My work included actor tracking, malware research, infrastructure analysis, and campaign correlation to support threat hunting and incident response.

Earlier, at PwC, I investigated advanced threats and analyzed malware using tools including IDA Pro, OllyDbg, CyberChef, and Wireshark. At SecPod Technologies, I performed malware and security research, automated IOC extraction with Python, and developed OVAL definitions.

Experience

Work history, roles, and key accomplishments

Current

Lead Cyber Threat Intelligence Analyst

Current

Nike India Technologies

Jun 2022 - Present (4 years 5 months)

Lead intelligence-driven investigations into nation-state, financially motivated, ransomware, phishing, and advanced threat campaigns. Conduct adversary infrastructure research and translate intelligence into prioritized hunting and detection opportunities for SOC, Incident Response, and Detection Engineering teams.

Threat Intelligence Threat Hunting MITRE ATT&CK IOC Enrichment Passive DNS ThreatConnect Sigma Detection Engineering THREAT RESEARCH Phishing Analysis Executive Reporting

Cyber Security Consultant and Researcher (Lead)

CYFIRMA

May 2020 - Jun 2022 (2 years 1 month)

Led strategic and operational threat intelligence engagements for global enterprise customers, covering nation-state actors, ransomware, malware campaigns, and exploit activity. Performed threat actor tracking, malware research, and infrastructure analysis to develop intelligence supporting threat hunting and incident response.

Threat Intelligence Malware Research Adversary Tracking Infrastructure Analysis Attribution Campaign Correlation Threat Intelligence Platforms Incident Response

Senior Analyst – CSIRT Global NIS

PwC

Mar 2018 - Apr 2020 (2 years 1 month)

Investigated advanced threats through malware analysis, threat hunting, and IOC analysis, providing intelligence support for global incident response operations. Performed static and dynamic analysis and reverse engineering using IDA Pro, OllyDbg, CyberChef, and Wireshark to identify malware behavior and investigative leads.

Malware Analysis Reverse Engineering IDA Pro OllyDbg CyberChef Wireshark Threat Hunting IOC Analysis MITRE ATT&CK Incident Response

Security Research Engineer

SecPod Technologies

Nov 2015 - Aug 2017 (1 year 9 months)

Performed static and dynamic malware analysis, vulnerability and security research, and IOC extraction for enterprise security products. Automated IOC extraction and research workflows using Python and developed OVAL definitions supporting vulnerability and security content capabilities.

Malware Analysis Vulnerability Research IOC Extraction Python OVAL Security Research