Headline

Threat Detection Engineer | EDR Coverage & False Negative Elimination | MITRE ATT&CK | Ransomware & HoK Attack Research | Detection Rule Author

About

Threats don't announce themselves. My job is finding the ones that don't. I specialize in EDR detection engineering — closing the gaps between what security tools should catch and what they actually catch. That means hunting false negatives, building detection rules from first principles, and mapping every finding to MITRE ATT&CK so defenders know exactly what they're covered against. 🔵 Core Role Detection Engineer / Senior Security Consultant [Ltimindtree] · [From 2022] Focused on EDR detection coverage — identifying what evades detection and building rules to close the gap. Eliminated critical false negatives across EDR telemetry by analysing malware behavior and authoring precision detection logic. Mapped 100% of detection rules to MITRE ATT&CK techniques, enabling structured coverage reporting and gap analysis. Investigated HoK (Hands-on-Keyboard) and HUMOUR attack patterns in ransomware intrusions, producing detection content from finding. Led investigations on advanced threat incidents, including ransomware and stealthy lateral movement attributed to human-operated attacks. Reduced alert fatigue through systematic false positive tuning, improving SOC triage efficiency. Resolved enterprise customer escalations with detailed investigations and written technical conclusions.

Location

Hyderabad

Work experience

Senior Consultant - Cybersecurity at LTIMindtree, Jan 2026 - Present · 5 mos, India

Security Researcher at LTIMindtree, Feb 2022 - Present · 4 yrs 4 mos, Hyderabad, Telangana, India

Security Analyst at CSCC LABS, Aug 2021 - Feb 2022 · 7 mos, Madhapur, Hyderabad

Security Analyst -L1 at CSCC LABS, Feb 2020 - Feb 2022 · 2 yrs 1 mo, Hyderabad, Telangana, India

Education

Bsc, Computer and Information Sciences and Support Services, Osmania University