Open to opportunities

Vignesh Rajan

@vigneshrajan

Message

Senior security researcher specializing in detection engineering, threat hunting, and AI-driven SIEM automation.

India

Message

What I'm looking for

I’m looking for a role where I can build low-noise detections and run adversary-informed threat hunts using agentic/LLM automation, partner with SOC teams, and continuously improve security posture across SIEM ecosystems.

I’m a Senior Security Researcher focused on Detection Engineering & Threat Hunting, turning complex telemetry into actionable intelligence for enterprise security operations. At Microsoft, I architected scalable multi-cloud threat detection and response solutions with Azure Sentinel, KQL, and Python.

I lead agentic AI-driven DE&TH initiatives, using LLM-assisted automation to run hypothesis-driven hunts across diverse SIEM ecosystems. I build high-fidelity detections across the attack lifecycle using MITRE ATT&CK and adversarial behavior hunting to proactively identify advanced threats.

I also mentor detection engineers and threat hunters on detection-as-code practices, adversary tradecraft analysis, and operationalizing hunt findings into scalable, low-noise rules. My background includes supervised triage and escalation in a tiered SOC at Ernst & Young, plus endpoint and malware analysis with leading EDR tools at Secureworks—strengthened by hands-on data mining and threat-intel work during my internship.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Researcher

Current

Microsoft

Feb 2022 - Present (4 years 4 months)

Architected scalable multi-cloud threat detection and response solutions using Azure Sentinel, KQL, and Python, translating telemetry into actionable intelligence for enterprise security operations. Led agentic AI-driven detection engineering and threat hunting initiatives to proactively identify advanced threats using LLM-assisted automation and MITRE ATT&CK-informed hunting.

Azure Sentinel Python Detection Engineering Threat Hunting SIEM Detection As Code

Senior TDR Analyst

Ernst & Young

Jan 2021 - Jan 2022 (1 year)

Supervised security event monitoring and real-time triage in a tiered SOC environment using CrowdStrike Falcon and Carbon Black endpoints. Led complex endpoint and cloud security investigations, and operationalized detection engineering content and MITRE ATT&CK-based threat hunting and intelligence integration.

CrowdStrike Falcon Cloud Security Carbon Black Security Triage Digital Forensics Incident Response Security Investigations SIEM Threat Intelligence

MDR Analyst

Secureworks

Feb 2018 - Jan 2021 (2 years 11 months)

Performed endpoint and malware analysis on infected hosts using EDR platforms including Secureworks Red Cloak, Carbon Black, CrowdStrike Falcon, and Microsoft Defender ATP. Correlated logs and alerts with SIEM tools using SQL and data analysis, developed detection hypotheses, and documented rules and hunting procedures to improve client security posture.

EDR Secureworks Red Cloak Carbon Black Microsoft Defender SQL Digital Forensics Threat Intelligence

Cyber Security Analyst Intern

QxBranch

May 2017 - Dec 2017 (7 months)

Developed Python-based software and algorithms to transform customer cyber telemetry into actionable intelligence and risk modeling outputs. Conducted threat intelligence research using data scraping and machine learning, and delivered visualizations and reports to support cyber risk assessment for insurers.