Open to opportunities

shivam upadhyay

@shivamupadhyay2

Message

Cybersecurity professional specializing in threat hunting, incident response, red teaming, and security assessments.

India

Message

What I'm looking for

I seek roles where I can lead threat-hunting and red-team initiatives, improve SOC detection and response, and collaborate with dev teams to embed security in the SDLC.

I am a cybersecurity professional with 3+ years of hands-on experience in threat hunting, incident response, red teaming, and improving detection and response capabilities for global clients.

At Arctic Wolf I led security assessments including SAST/DAST/IAST, optimized Kibana SIEM dashboards to cut triage time by 75%, and reduced malware false positives by 80% through refined analysis and detection rule updates.

Previously at Ernst & Young I helped build and mature SOC capabilities, executed 25+ red team simulations, performed VAPT and AD assessments for 20+ clients, led EDR deployments, and responded to ransomware incidents for major pharma and retail organizations.

I combine practical offensive skills (Burp Suite, Metasploit, Nmap), SIEM/EDR expertise (Kibana, CrowdStrike, Sentinel), and security governance experience (ISO 27001, NIST CSF) to embed security into SDLCs and strengthen organizational resilience.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

Arctic Wolf

Jun 2024 - Present (1 year 3 months)

Conducted SAST/DAST/IAST assessments and SIEM (Kibana) optimization, reducing triage time by 75% and false positives by 80% through custom detection rules and automated analysis.

SAST DAST IAST Kibana Malware Analysis SIEM EDR Threat Modeling

Associate Consultant

Ernst and Young LLP

Aug 2021 - Aug 2023 (2 years)

Led SOC implementation to maturity, executed 25+ red team simulations and 20+ VAPT/AD assessments, improving detection capabilities and reducing organizational cyber risk.

SOC Red Team VAPT

Security Consultant

Dark Next LLP

Apr 2021 - Aug 2021 (4 months)

Performed penetration testing and network device configuration reviews using Burp Suite, Nessus and ZAP, remediating misconfigurations and delivering detailed vulnerability reports to stakeholders.

Penetration Testing Burp suite Nessus ZAP Vulnerability Reports