Jun 2022 – Present · 3 yrs 10 mos · Bengaluru, Karnataka, India

Jun 2019 – Feb 2023 · 3 yrs 8 mos · Bengaluru, Karnataka, India

Mar 2018 – Feb 2023 · 4 yrs 11 mos

Sep 2017 – Jul 2025 · 7 yrs 10 mos · Bengaluru, Karnataka, India · On-site

• Led global DFIR operations across 100+ countries while maintaining hands-on involvement in critical investigations; personally conducted forensic analysis for highest-severity incidents.
• Built and managed SOC team of 10 analysts, established hiring criteria, created technical training curriculum, implemented career development frameworks, and maintained <15% annual turnover in competitive market.
• Authored detection rules while building processes that enabled teams to develop and maintain 500+ detection signatures across SIEM and EDR platforms.
• Reduced Mean Time to Respond (MTTR) by 85% through security automation initiative - architected SOAR playbooks, wrote integration code, and led change management to drive analyst adoption.
• Served as technical advisor to management and extended teams during major incidents: translated complex forensic findings into executive briefings and legal documentation supporting regulatory response.
• Supported annual budget planning for security operations tooling: conducted vendor evaluations, negotiated contracts, and made build-vs-buy decisions based on technical assessment and business requirements.
• Established forensic investigation methodology compliant with legal requirements across 30+ jurisdictions: personally validated technical procedures while building documentation and training for global team.
• Supported technical security workstream for M&A due diligence on acquisitions: assessed target security architecture, identified integration risks, and presented findings to business.
• Supported creation of threat intelligence function: selected and integrated TIP platform, established collection sources, developed analytical workflows, and produced strategic intelligence products for executive consumption.
• Developed incident response playbooks for 25+ scenario types: authored technical procedures while ensuring alignment with legal, HR, communications, and business continuity stakeholders.

May 2015 – Sep 2017 · 2 yrs 4 mos · Chennai Area, India · On-site

• Led enterprise incident management for global client portfolio while maintaining deep technical involvement — personally conducted forensic analysis for complex intrusions including APT campaigns and targeted attacks
• Built forensic investigation capabilities from ground up: evaluated and implemented tooling, developed evidence handling procedures, trained analyst team, and established quality assurance processes
• Developed active defense solutions: architected technical approach, wrote detection logic, and presented capability roadmap to client security leadership.
• Served as escalation point and technical mentor for team of 20 analysts, conducted case reviews, provided investigation guidance, and built knowledge management repository
• Delivered executive incident briefings to client CISOs: translated technical forensic findings into business impact assessment and strategic remediation recommendations
• Created forensic analysis playbooks for server, endpoint, mobile, and cloud evidence types: authored technical procedures while establishing documentation standards for legal defensibility

Aug 2012 – Apr 2015 · 2 yrs 8 mos · Faridabad Area, India

• Conducted digital forensics investigations for law enforcement agencies and corporate clients, specializing in endpoint acquisition, data recovery, and evidence preservation.
• Identified new features for law enforcement and corporate clients, leading to enhanced solution development.
• Conducted acquisition and seizure of endpoints using various software and hardware solutions.
• Recovered data from various devices and conducted demonstrations of forensics tools.

Apr 2012 – Aug 2012 · 4 mos · Bangalore

• Studying and preparing for GIAC Certified Forensic Analyst certification to enhance incident investigation skills.
• Developing expertise in handling advanced incident scenarios like data breach intrusions and anti-forensic techniques.
• Self-studying to gain knowledge in conducting formal investigations and complex digital forensic cases.

Aug 2011 – Mar 2012 · 7 mos · Bangalore

• Learned about various aspects of Information Security under the PGDIS course at CDAC, Bangalore.
• Gained exposure to tools and technologies for Network Security, Web Site Security, Data Security, and System Security.

Apr 2010 – Jul 2011 · 1 yr 3 mos

• Taught advanced computer science concepts while pursuing cybersecurity specialization and industry certifications. Transitioned to full-time cybersecurity career in 2012.
• Taught CO, OS, C++, DS, and Algorithm courses to undergraduate students
• Developed engaging curriculum enhancing student understanding of complex technical concepts
• Implemented innovative teaching methods ensuring student success in technical skills

Jan 2009 – Mar 2010 · 1 yr 2 mos

• Taught CO, OS, C++, DS, and Algorithm courses to undergraduate students

Sep 2006 – Jan 2008 · 1 yr 4 mos · Greater Indore Area

• Designing web page as per client requirements.

Jul 2005 – Aug 2005 · 1 mo · Greater Lucknow Area

• Researched and analyzed VPN services at M/s Bharti Tele-Ventures Pvt Ltd, focusing on network setup and construction.
• Assisted in developing in-house Cost Management Software, enhancing organizational efficiency.
• Collaborated with Training Officer to gain hands-on experience in broadband and telephone services industry.

Jul 2005 – Jul 2005 · 0 mo · Greater Lucknow Area

• Studied the FAN (Fixed Area Network) for broadband services at Reliance Infocomm Ltd, Lucknow.
• Researched and analyzed the latest technologies in the industry to enhance network efficiency.
• Collaborated with team members to implement innovative solutions for network optimization.

Jul 2004 – Jul 2004 · 0 mo · ALLAHABAD

• Learned computer network basics including routing, DNS, firewalls, and DMZ at ITI Ltd, Naini Plant.
• Assisted in in-house software development and gained practical experience in PL/SQL programming.