---
title: "Rohan Taluja - Threat Detection Engineer in New Delhi | Tal"
description: "Meet Rohan Taluja, Threat Detection Engineer @ CyberProof based in New Delhi."
image: "https://tal.club/meet/rohan-48/share-image"
---

# Rohan Taluja on Tal

## Headline

Threat Detection Engineer @ CyberProof

## About

Cybersecurity professional with 5\+ years of experience across SOC operations, SIEM/SOAR engineering, and threat detection\. Specialised in designing detection rules using YARA\-L 2\.0 and KQL, automating security workflows with Python, and deploying AI\-driven tooling for rule health automation\. Hands\-on expertise with Chronicle, ArcSight, Siemplify, and Sentinel\. ISO 27001 Lead Auditor and Implementer\.

## Location

New Delhi

## Work experience

Threat Detection Engineer at CyberProof, Sep 2024 \- Present · 1 yr 11 mos, Hybrid, Detection Rules: Configured Yara\-L 2\.0 and KQL analytic rules to improve MITRE coverage along with Sigma logic for easier translation\. Methodology includes consumption of recent threat actor based articles and the detection strategies from the MITRE framework\. Parser Creation: Createdcustomparsersforsyslog,json,csv,etclogformatsinGoogleChronicle \(SecOps\) for better indexation\. Lab configuration: Set up a lab based on Proxmox to host servers \(Windows and Linux\) and configured Caldera for testing new detection logic Automation Scripts: Designed python scripts to automate detection workflows including rule update pushes to reduce manual effort\. AI Integration: Designed PRD\.md pattern files using Daniel Miessler’s Fabric \(PAI\) framework to automate SIEM rule health checks via AI, enabling proactive detection quality assurance\. PowerPoint Automation: Created a Claude skill based on MITRE json files from Google Chronicle \(SecOps\) to be converted to presentations for stakeholder overview\.

Senior Cyber Security Consultant at PwC India, Apr 2024 \- Sep 2024 · 6 mos, Hybrid, Chronicle SIEM Configuration: Configured Chronicle agent to manage various log sources such as Azure AD, Linux, Windows and other security devices followed by log analysis and Yara\-L 2\.0 rule creation SOAR: Integrated Siemplify SOAR with multiple SIEM solutions to implement downstream actions for automation and response by creating various playbooks along with GraphQL and REST API MISP: Collaborated with the Threat Intelligence team to implement an MISP server to leverage its capability along with Virus Total and Mandiant threat feeds Client Demo: Conducted regular client demos in collaboration with the sales team to showcase the features and capabilities of PwC’s SOC offering \(SIEM and SOAR\) Collaboration and Training: Implemented a structured training program that resulted in a 20% increase in junior team members’ productivity within the first six months

Cyber Security Consultant at PwC India, Apr 2022 \- Mar 2024 · 2 yrs, Hybrid, Log Management: Configured ArcSight Loggers \(50k EPS\) to manage various log sources such as firewalls, OS, EDR and other security solutions\. ArcSight SIEM Configuration: Configured 100\+ security use case for better detection for multiple security devices such as Trend Micro DDI, Cisco IronPort, etc\. Log Analysis: Performed log analysis to detect anomalies to enhance the security use cases\. Log Forwarding and Integration with SIEM: Identified types of logs with security importance for 50\+ devices such as MCAS, O365, firewalls, web servers, etc\. and forwarded to various SIEM solutions Dashboarding: Configured multiple dashboards on ArcSight ESM for easier alert analysis such as malicious communication attempts\. POCs: Performed various POCs for AUTOMOX \(Patch Management solution\), IRONSCALES \(Email Security solution\), ShadowPlex Deception \(Honey Pot solution\) SOAR: Implemented malicious IP address blocking on Check Point firewall based on SIEM alerts

Senior Cyber Security Analyst at PwC India, Aug 2021 \- Mar 2022 · 8 mos, Hybrid, Analysis: Created automated Excel workbooks for security incidents analysis from multiple ticketing tools, MTTD & MTTR calculation, etc\. Dashboarding: Created multiple comprehensive presentations to highlight important security metrics and detections through threat hunting Security Analysis: Tracked and analyzed networks/systems for potential security violations and anomalies, responding promptly to all identified incidents\. Identified and implemented opportunities to enhance the efficiency of SOC processes\. Understanding of cybersecurity threats, vulnerabilities and attack trends\.

Social Media Team Leader at Amoli Trust, Jan 2020 \- Jan 2022 · 2 yrs 1 mo, New Delhi, Delhi, India

Public Relations Team Volunteer at Amoli Trust, Jan 2020 \- Jan 2021 · 1 yr 1 mo, New Delhi, Delhi, India

Social Media Team Volunteer at Amoli Trust, Jul 2019 \- Dec 2019 · 6 mos, New Delhi, Delhi, India

Research Analyst at Emo Matrix Company, Mar 2021 \- Jul 2021 · 5 mos, New Delhi, Delhi, India, Intern of the month \- May 2020

PLC Intern at JML Engineering, Jun 2020 \- Jul 2020 · 2 mos, New Delhi, Delhi, India, The objective of the internship was to get a thorough idea of PLCs and their practical uses by programming it for industrial equipment\.

## Education

Bachelor of Technology \- BTech, Electronics and Communication, Bharati Vidyapeeth's college of engineering

High School Diploma, Mount Carmel School, Dwarka

[View the original profile](https://tal.club/meet/rohan-48)

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Person",
      "@id": "https://tal.club/meet/rohan-48#person",
      "name": "Rohan Taluja",
      "url": "https://tal.club/meet/rohan-48",
      "image": "https://tal.club/meet/rohan-48/profile-photo.jpg",
      "description": "Meet Rohan Taluja, Threat Detection Engineer @ CyberProof based in New Delhi.",
      "jobTitle": "Threat Detection Engineer",
      "worksFor": {
        "@type": "Organization",
        "name": "CyberProof"
      },
      "hasOccupation": {
        "@type": "Occupation",
        "name": "Threat Detection Engineer"
      },
      "homeLocation": {
        "@type": "Place",
        "name": "New Delhi"
      },
      "alumniOf": [
        {
          "@type": "EducationalOrganization",
          "name": "Bharati Vidyapeeth's college of engineering"
        },
        {
          "@type": "EducationalOrganization",
          "name": "Mount Carmel School, Dwarka"
        }
      ],
      "mainEntityOfPage": {
        "@id": "https://tal.club/meet/rohan-48#webpage"
      }
    },
    {
      "@type": "ProfilePage",
      "@id": "https://tal.club/meet/rohan-48#webpage",
      "url": "https://tal.club/meet/rohan-48",
      "name": "Rohan Taluja on Tal",
      "description": "Meet Rohan Taluja, Threat Detection Engineer @ CyberProof based in New Delhi.",
      "dateModified": "2026-07-18T05:46:56.420Z",
      "isPartOf": {
        "@id": "https://tal.club/#website"
      },
      "mainEntity": {
        "@id": "https://tal.club/meet/rohan-48#person"
      },
      "primaryImageOfPage": {
        "@type": "ImageObject",
        "url": "https://tal.club/meet/rohan-48/profile-photo.jpg",
        "contentUrl": "https://tal.club/meet/rohan-48/profile-photo.jpg",
        "caption": "Rohan Taluja profile photo on Tal"
      },
      "inLanguage": "en-IN"
    }
  ]
}
```