How I got here
From code to incidents: the path that shaped the work I do now.
My journey started at AiROBOSOFT as an AIML Intern, where I trained predictive-analytics models with Scikit-learn and Pandas - and learned the gap between a notebook that works and a model that ships.
At TekWorks I built "Arogya", a hospital management system that replaced paper-and-Excel for an entire administrative team. Patient-record lookup went from hours to seconds. I owned the responsive front-end and the REST APIs underneath it.
At UnifyCX as a Junior Support Engineer, email security found me the way it finds most people - because something was on fire. IP blacklisting and weak SMTP auth had tanked delivery for 200+ enterprise domains. I pulled them back to 95% inbox placement by hardening SPF, DKIM, and DMARC across the fleet. Failures dropped 40%+. I cleaned 60+ web assets, automated SSL/TLS renewals for 300+ domains, and learned that the right infrastructure fix prevents more incidents than any detection rule.
My first SOC seat came at Tracelay as a SOC Analyst Intern. Tier-1 monitoring, alert pattern-matching, and the fundamental question that still drives my work: "what does this alert actually mean?"
At Qubit Capital as an IT Support Specialist I owned email security for 150+ early-stage startups. SPF, DKIM, and DMARC at 98%+ alignment across 1,300+ domains. Spoofing incidents down 60%. Built a real-time monitoring dashboard with Claude Code that replaced the Monday-morning manual health check.
250+ phishing, BEC, and malware cases investigated. Header analysis, sandbox detonation, IOC pivots. False positives down 25%, analysis time down 35%, remediation above 90%. The n8n automation pipeline dropped mean response from 4 hours to under 75 minutes.
Alongside the incident work I went deep into AI security and Non-Human Identity governance - areas where the attack surface is still being mapped. Certifications in AI security from Proofpoint and Virtual Cyber Labs, because understanding the new attacker toolkit means learning it myself first.
Now on the Capgemini CERT team as an Associate Cyber Security Analyst in the Threat and Vulnerability Intelligence group. My charter: AI automation and autonomous workflows, building the agentic tooling that takes repeatable triage and enrichment off the analyst critical path at enterprise scale.
The research side is where my side projects and the day job converge: hunting and researching AI-driven threats. AI-enabled attack tooling, LLM abuse, agent containment failures. Mapping the emerging AI attack surface and feeding what I find back into detection and threat intelligence.