Headline

Threat Hunter & Detection Engineer | Breach & Attack Simulation (BAS) | CRTA | CTI Analyst | Caldera • Wazuh • KQL • Sigma

About

I spend my time turning adversary behavior into measurable security outcomes. I’m currently a Breach & Attack Simulation Intern, working with MITRE ATT&CK–mapped adversary emulation, BAS workflows, and purple team exercises to help answer a simple question: do our defenses actually work? Tools matter — evidence matters more. My background cuts across Red Team simulation, SOC operations, and threat hunting, which lets me think like an attacker while validating detections like a defender. I’m most at home where offense meets defense, and assumptions get tested. I work with: Frameworks: MITRE ATT&CK, NIST, Cyber Kill Chain Adversary Emulation / BAS: MITRE Caldera, Atomic Red Team SIEM / EDR / Monitoring: Wazuh, Elastic (ELK), Windows Event Logs Detection Writing: Sigma Rules, KQL (Kusto Query Language), YARA Areas of Expertise: Threat Hunting, Cyber Threat Intelligence (CTI), Purple Teaming, Active Directory Security (CRTA) I don’t build security theater. I’m interested in repeatable, testable, threat-driven security — the kind that improves with every iteration. When I’m not simulating attackers, I’m usually automating workflows, breaking assumptions, or learning how to make security programs scale. If you’re building AttackIQ-style platforms, BAS programs, or adversary-driven security teams, we’ll probably speak the same language.

Location

Urun-Islāmpur

Work experience

President - Cybersecurity Club at Cryptx Security RIT, Oct 2025 - Present · 8 mos, Rajarambapu Institute of technology

Breach and Attack Simulations Intern at Threatactix Private Limited, Mar 2025 - Present · 1 yr 3 mos, Pune District, Adversary Emulation: Engineered and executed 5 custom Ransomware playbooks (emulating behaviors of modern strains like LockBit/BlackCat) inside a Windows VM environment via MITRE Caldera. Telemetry Collection: Maintained and configured log pipelines into Wazuh EDR to capture end-to-end telemetry across initial access, execution, credential dumping, and encryption phases. Threat Hunting & Detection Validation: Conducted hypothesis-based threat hunting on telemetry logs, generating formal MITRE ATT&CK Gap Analysis reports classifying coverage as Missed, Partial, or Detected. Community Engagement: Coordinated operations and speaker management as a core team member of the Threat Hunting Village.

Google Developer students Club at GDG On Campus,RIT, Sep 2023 - Oct 2024 · 1 yr 2 mos, On-site

Cybersecurity trainee at DevTown, Apr 2023 - Jul 2023 · 4 mos, Hey! So, I took a self-paced Cybersecurity industrial training program, and it was amazing! I learned so much about different types of cyber attacks and how to prevent them. I also got hands-on experience with different tools and techniques used in cybersecurity. It was great to be able to work at my own pace and really take the time to understand the material. Overall, it was a really valuable experience that I'm excited to apply in my future career!

Java Development Spoken Tutorial at Indian Institute of Technology, Bombay, Oct 2022 - Oct 2022 · 1 mo, Mumbai, Completed rigorous coursework and successfully passed the online examination for the Java Software Development Program, organized by Government Polytechnic, Awasari in collaboration with the IIT Bombay Spoken Tutorial Program (National Mission on Education through ICT, MoE, Govt. of India). Key Focus Areas: Object-Oriented Programming (OOP) principles, data structures, and exception handling. Application logic validation and source code analysis. Troubleshooting execution workflows and code debugging.

Education

Bachelor of Technology - BTech, Computer Engineering, Rajarambapu Institute of Technology, Rajaramnagar, SAKHARALE

Diploma in computer engineering, Computer and Information Sciences and Support Services, Government polytechnic Awsari