Open to opportunities

Tushar Agarwal

@tusharagarwal2

Message

Senior Security Engineer specializing in threat detection, hunting, and incident response across cloud environments.

India

Message

What I'm looking for

I’m looking for a senior security role at a global technology company where the problems are hard and the stakes are real—working on threat detection & hunting, incident response, cloud security, and vulnerability management.

I’m a senior security engineer focused on finding threats automated tools miss and shutting them down before they become incidents. My work spans threat detection & hunting, incident response, cloud security, and vulnerability management across AWS, hybrid, and enterprise environments.

At Naviga Global, I investigate and triage 60–80 security incidents weekly across endpoint, identity, cloud, and network, reducing mean time to respond (MTTR) by ~65%. I develop and optimize SIEM detection rules and automation workflows to cut alert noise by ~50–70%, lead hypothesis-driven threat hunting with KQL, and perform end-to-end incident response with root cause analysis, containment & eradication, and runbook-driven recovery.

I also strengthen identity and data protection by managing Okta SSO/MFA and implementing insider threat detection and DLP monitoring with Code42 (Incydr). On the cloud and vuln side, I monitor AWS CloudTrail and GuardDuty for IAM misconfigurations, manage vulnerability lifecycles across 500+ assets with Tenable and Rapid7 (reducing critical vulnerabilities by ~40% within a quarter), and maintain audit-ready evidence for SOC 2 compliance.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Engineer

Current

Naviga Global

Dec 2021 - Present (4 years 6 months)

Investigated and triaged 60–80 security incidents weekly across endpoint, identity, cloud, and network environments, reducing MTTR by ~65%. Built and optimized SIEM detections and automation workflows to cut alert noise by ~50–70%, led threat hunting with KQL, and reduced critical vulnerabilities by ~40% across 500+ assets within a quarter.

Incident Response Threat Detection Engineering Threat Hunting SIEM Splunk Microsoft Defender GuardDuty Rapid7 Tenable Rapid7 Risk Prioritization

Executive - Cyber Security

Confidential Organization

Oct 2021 - Nov 2021 (1 month)

Delivered cybersecurity operations and digital forensics support, contributing to incident analysis, evidence collection, and threat identification in a fast-paced environment.

Digital Forensics Cybersecurity Operations Root Cause Analysis Malware Analysis

Cyber Security Intern

Gurugram Cyber Cell

Jun 2021 - Jul 2021 (1 month)

Gained hands-on exposure to cybercrime investigations, including ransomware, financial fraud, and session hijacking, under expert mentorship. Completed specialized training in threat intelligence, dark web analysis, and cryptocurrency investigations.

Cybercrime Ransomware Investigation Fraud Analysis Session Hijacking Threat Intelligence Dark Web Investigations