Work experience

Tactical Threat Analyst 2 (MDR)

Current

Fortinet

May 2023 – Present

Managed Detection and Response (MDR) · FortiEDR · Monitoring · Threat hunting · Incident response

  • Working as a Tactical Threat Analyst in the Managed Detection and Response (MDR) team, responsible for protecting premium clients from advanced cyber threats.
  • Performing 24/7 security monitoring across endpoints using FortiEDR.
  • Analyzing and triaging security alerts to identify true threats and reduce false positives.
  • Conducting proactive threat hunting to detect sophisticated and hidden malicious activities.
  • Investigating security incidents to determine scope, root cause, and impact.
  • Executing rapid incident response actions, including isolating compromised endpoints and mitigating threats.
  • Performing remediation and supporting forensic analysis to restore systems and prevent recurrence.
  • Leveraging threat intelligence to identify emerging attack patterns, tactics, and techniques (TTPs).

Security Researcher

LTI Mindtree

Apr 2021 – April 2023

Microsoft Defender for Endpoint · Threat detection · MITRE ATT&CK

  • Strengthened enterprise EDR coverage by analyzing machine-telemetry and classifying true vs false positives—reducing alert fatigue for analysts and improving trust in detections.
  • Emulated APT-style behaviors against production-style scenarios to validate detections and map gaps to the MITRE ATT&CK framework.
  • Authored suppression and tuning logic for noisy detectors so high-fidelity signals surface during incidents.
  • Partnered with customers on escalations: reproduced issues, documented findings, and delivered clear remediation guidance backed by evidence.
  • Contributed to the security research lifecycle for Defender for Endpoint—from idea to validated detection in the field.

Technical Trainee

ENH iSecure

Feb 2020 – Oct 2020

Cybersecurity fundamentals · Networking · IAM · Scripting

  • Joined as a Technical Trainee during the final year of B.Tech, gaining hands-on experience in cybersecurity fundamentals.
  • Developed understanding of networking concepts including protocols, ports, and standards (IETF).
  • Worked on scripting and Identity & Access Management (IAM) concepts.
  • Built small projects and web-based applications as part of practical learning.