Dec 2025 – Present · 4 mos · Bengaluru, Karnataka, India · On-site

• Define and own the long-term technical vision and security architecture for EDR/XDR platforms, ensuring scalable and adversary-resilient detection.
• Serve as the highest technical authority on detection efficacy, establishing organization-wide standards for ATT&CK coverage, accuracy, and false-positive reduction.
• Lead product-level security architecture design, guiding major platform and system-level decisions across endpoint, cloud, identity, and data pipelines.
• Drive adversary-led strategy by translating real-world attacker behavior and threat intelligence into product architecture and roadmap direction.
• Architect and govern continuous adversary emulation and purple-team programs to measure, benchmark, and improve detection effectiveness.
• Own and evolve secure SDLC strategy, embedding threat modeling, secure design reviews, and security validation across the product lifecycle.
• Establish security architecture and SDLC governance frameworks to ensure consistent, auditable, and scalable security practices across teams.
• Provide cross-organizational architectural oversight, resolving complex security design tradeoffs and managing architectural risk.
• Influence executive, product, and engineering leadership on security risk, architecture decisions, and long-term technical investments.
• Mentor principal engineers, architects, and researchers, raising the technical bar and developing future technical leaders.

Apr 2024 – Dec 2025 · 1 yr 8 mos · Bengaluru, Karnataka, India · On-site

• Evaluate and enhance the detection capabilities of EDR/XDR products.
• Improve threat detection through simulated attacks, threat intelligence feeds, and real-world scenarios.
• Design and develop adversary emulation plans.
• Design and develop adversary emulation infrastructure and tools.
• Analyse detection rules, signatures, and behavioral analytics within EDR/XDR platforms to improve their detection accuracy and reduce false positives/negatives.
• Optimize the performance of EDR/XDR tools, ensuring they provide timely and accurate threat detection without impacting system performance.
• Conduct in-depth research on emerging threats, attack techniques, and vulnerabilities.
• Collaborate with threat intelligence teams to incorporate the latest threat data into product development and research efforts.
• Design and execute MITRE ATT&CK-based adversary emulation exercises to test the effectiveness of EDR/XDR products.
• Identify gaps in detection coverage by comparing the EDR/XDR performance against MITRE ATT&CK techniques.
• Align EDR/XDR capabilities with the evolving MITRE ATT&CK framework, incorporating new techniques and tactics as they emerge.
• Lead and coordinate purple team exercises that bring together red (offensive) and blue (defensive) teams to collaboratively test and improve security defenses.
• Lead a team of security researchers, analysts, and engineers. Set research agendas, assign tasks, and ensure high-quality outputs from the team.
• Provide guidance and mentorship to security researchers, architects, threat hunters and developers.
• Collaborate with product management, development teams, threat intelligence, and customer-facing teams to ensure alignment across all aspects of the security product lifecycle.

Nov 2021 – Mar 2024 · 2 yrs 4 mos · Bengaluru, Karnataka, India · On-site

• Contribute to Product Security Policy, Standards, and Guidelines .
• Implement Secure Software Development Lifecycle (SSDLC) practices across Trellix.
• Evaluate and operationalize new technologies for securing the Trellix products.
• Provide SME expertise throughout Trellix Engineering and Product Teams on SSDLC.
• Lead in-depth architecture,design,code and product reviews to identify vulnerabilities.
• Build Threat Models and execute Risk Assessments,provide effective countermeasures.
• Perform product security design and code review,guide with integration of DevSecOps.
• Assess the security of complex cloud stacks.
• Designing and building security tools, scripts integrated with the CI/CD pipeline.
• Implement security automation where possible.
• Lead and Guide Penetration Testing efforts across Trellix.
• Build Fuzzing at Scale for process,services & protocol fuzzing.
• Develop Adversary Emulation Tools for better XDR & EDR efficacy.
• Educate organization on Threats,Risks and Importance of Security in Trellix products.
• Mentor security architects, engineers and help improve product team tradecraft, techniques, and tooling.
• Create world class security training & course contents for experienced security engineers.