May 2016 – Mar 2018 · 1 yr 10 mos · Sunnyvale, California

• Responsible for Investigations and Incident Response tasks which include:
• 1. Tracking intruders on the network using modern and experimental techniques at scale of 1 billion users per month
• 2. Conducting and automating digital forensic analysis on hosts to determine root cause of an incident
• 3. Searching and threat hunting - Migrated custom scripts and alerts to osquery
• 3. Handling 24x7 on-call rotation for incident response
• 4. Analyzing, triaging and verifying fixes of security vulnerabilities
• 5. Filing mass security tickets for vulnerabilities affecting Yahoo infrastructure
• 6. Bringing systems and network back to restore expected/normal operations
• Skills Gained and/or Developed:
• Large scale investigations (memory dump, system logs, disks), Responding to Incidents (information disclosure, phishing, exposed vulnerabilities/services, insecure configurations, DOS and DDOS attacks, Advanced dedicated threats), Threat hunting using various tools like Splunk, Google GRR and Carbon Black, Python and Bash scripting to automate forensic analysis, Effective leadership (C-level) briefing in writing and presentations, Mentoring new hires (1:1 as well as through monthly technical presentations company wide)
• Certifications/ Trainings attended:
• 1. GIAC GCIH (Certified Incident Handler)
• 2. Carbon Black Introductory Analyst
• 3. Encase Incident Investigations (IR-250)

May 2015 – Aug 2015 · 3 mos · Sunnyvale, California

• Responsible for the following with Yahoo's security team - paranoids:-
• 1. Aggregate all enterprise logs in a centralized location
• 2. Develop intrusion detection mechanisms by automating analysis on the collected logs which have millions of events
• Skills Gained and/or Developed:-
• Big data technologies like Hadoop, Hive and Oozie, Bash Scripting, Python, Java, Splunk API

Jul 2013 – Jul 2014 · 1 yr · Bangalore

• As part of digital video manager team which develops IP based security products (video management surveillance systems), my primary job function was to develop C++ components that aid in integration of new cameras from different vendors and Honeywell digital video manager system.

Jan 2013 – Jul 2013 · 6 mos · Bangalore

• Implemented information security modules (DPAPI, RSA, AES) in C# to facilitate secure communication between software and hardware (EBI Server and EBI client) components involved in a high profile security project for Honeywell access control systems

Dec 2012 – Jan 2013 · 1 mo · Lucknow

• Rigorous information security training covering topics such as footprinting, network scanning, steganography, cryptography, firewalls and intrusion detection/prevention systems, vulnerability scanning, penetration testing, incident handling and various attack vectors. This ultimately led to CISE (Certified Information Security Expert) Level 1 certification from Innobuzz, a NASSCOM and DSCI member company.
• Certification Number: 30530
• Verification Link: http://www.innobuzz.in/examination/verify/

May 2011 – Jun 2011 · 1 mo · Lucknow

• Grasped the implementation of telecom networks, principles of data transmission, signaling, digital switching, fiber optic (SDH and DWDM), broadband and NIB layouts, Intelligent Networks along with GSM and CDMA technologies