Security · AI · Autonomous Systems

SHUBHAMon the edge of the threat.

// CYBERSECURITY ENGINEER · DETECTION & INCIDENT RESPONSE · AI & AUTOMATION BUILDER

Cybersecurity engineer with 8+ years defending enterprise environments — detection engineering, incident response, SIEM, threat hunting and cloud security — backed by hands-on GRC and risk work. Now also building AI automation systems that ship to production. I live where security operations meet LLM-driven automation.

Chicago, IL · open to remote roles

VIEW OPERATIONS →ESTABLISH CONTACT

01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23 45 67 89 AB CD EF 01 23

● IDENTITY VERIFIED

Designation

Cybersecurity Engineer

Level

Senior

Years Active

Base

Chicago, IL

Specialty

Detection · IR · SIEM

Status

● OPEN TO ROLES

Years in Security

30,000+

Endpoints Covered by My Detections

−60%

False Positives Cut (SIEM Tuning)

100TB+

Daily Logs Under Management

−65%

Attacker Dwell Time Cut

10,000+

Servers Shielded from Ransomware

Latest Field Notes// 05

Opinion2026-09-29

Alert Fatigue Isn't a People Problem. It's a Tuning Problem.

How tuning for specific threat patterns, measuring false positives per rule, putting context in front of analysts and training Tier 1 cut SIEM noise at a large telecom.

Shubham Mane·4 min read

#soc#detection-engineering#siem

Analysis2026-06-17

CVE-2026-20253: Splunk Enterprise's Unauthenticated Postgres Sidecar — What Defenders Should Do

A CVSS 9.8, KEV-listed flaw in Splunk Enterprise 10.0/10.2 lets anyone who can reach Splunk Web hit an unauthenticated sidecar API. How to scope, patch and hunt.

Shubham Mane·5 min read

#cve-2026-20253#splunk#cisa-kev

Analysis2026-06-07

Gamaredon's WinRAR Exploit: What Defenders Actually Need to Do

Russia's most active APT is weaponising a patched WinRAR flaw — here's the real-world detection and response playbook.

Shubham Mane·7 min read

#apt#gamaredon#winrar

ALL FIELD NOTES →RSS ↗

/// OPERATIONS FEEDSIMULATED · ILLUSTRATIVESTREAMING