In my current role, I am a defensive security engineer specializing in DFIR, Threat Hunting and Detection Engineering.
My background in offensive security and software development brings an adversarial mindset and a developer's perspective
to investigating incidents, hunting threats, and engineering effective detections. I'm passionate about bridging the gap between
offensive and defensive security and building practical solutions that make detection and response more effective.
If you share similar interests, let's connect on Linkedin.
I am based out of the greater Salt Lake City Metropolitan area, Utah.
Intercontinental Exchange (Salt Lake City, UT)) - 2026 - Present
Responsible for cyber incident response, digital forensics, threat hunting, building and tuning detections.
Praetorian (Austin, TX) - 2024 - 25
Responsible for Web Application, API, Cloud and GenAI Penetration Testing engagements for clients ranging from SMBs to MAG7 companies across the technology, healthcare, and travel industries.
Northeastern University (Boston, MA) - 2024
Mentored junior Teaching Assistants, conducted lab sessions, graded assignments and assisted graduate students during the spring 2024 semester for the Computer Systems Security (CY 5130) course at the Khoury College of Computer Sciences, Northeastern University.
Entegris Inc. (Boston, MA) - 2023
Responsible for resolving security incidents and proactively staying updated on the latest attacker tactics, techniques and procedures. Created specialized Standard Operating Procedures (SOPs) to enhance the organization's response processes to real-world scenarios.
Oracle Corporation (Bengaluru, India) - 2019 - 22
Applied Secure SDLC principles towards the delivery of 150+ feature changes in an internal Escalation Management Application, which tracks escalations across over 40 Oracle products. Resolved two critical security issues (SQLi and Log Poisoning) in application code to ensure required internal compliance was achieved for migration of EMA from on-premise to Oracle Cloud Infrastructure.
Khoury College of Computer Sciences, Northeastern University (Boston, MA)
B.M.S College of Engineering (Bengaluru, India)
Executed thorough passive reconnaissance on a top tier gaming peripheral
company and analyzed potential attack surfaces that could be used by an attacker.
Tools used: Spiderfoot, Shodan, Wappalyzer, TheHarvester, dnsdumpster
Gained foothold on given vulnerable machine using known exploits and escalated to root user privileges. Tools used: Metasploit, Nmap, BurpSuite
Studied and presented a case study of a data breach at a social media company that occurred in early 2019. Analyzed a different approach to the post breach scenarios.
Programmed a cryptographic system using Bash with which users can digitally sign, encrypt and share files among multiple users.
Setup a virtual machine to act as a firewall, DNS resolver and router for a host machine to be able to communicate with the internet
More on the way..!
C/C++, Python, Go, Java, Bash, Javascript, Powershell
Spring MVC, Hibernate ORM, RESTful APIs, Postman
Windows Active Directory Attacks, Linux and Windows Privilege Escalation, Tunneling, Pivoting
Antivirus Evasion, Client Side Attacks, Reverse Engineering
Microsoft E5, Secureworks Taegis XDR, TrendMicro Vision One, TrendMicro Apex Central, Tenable, MISP
HTML5, Bootstrap, React js
BurpSuite Professional, Wireshark, Metasploit, Nmap, Shodan, pfSense, OpenSSL
Docker, Kubernetes, Jira, Confluence, Git
Burp Suite Certified Practitioner (BSCP) [February 2025]
Offensive Security Certified Professional (OSCP) [July 2024]
Offensive Security Wireless Professional (OSWP) [March 2025]
INE Security Junior Penetration Tester [May 2023]
HackTheBox Academy Pentester Path
Practical Ethical Hacker
Cryptography and Network Security, Cyber Incident Response and Digital Forensics, Threat Modeling, Penetration Testing Essential Learning
AWS Certified Developer training