Eric Kumar Email & Phone Number

West Palm Beach, Fl, Us

Redwood City, California, Us

• Build and deliver cyber threat intelligence services to internal and external stakeholders.• Provide relevant, timely, actionable threat intelligence to internal security teams that helps with securing company assets and customer data.

Worldwide, Oo

• Lead the development, mentoring, and growth of threat researchers and Intel analysts through the coordination of coaching sessions and goal setting to develop high-performers, foster individual career growth, and align on team expectations and standards.• Manage delivery and oversee production for multiple Deloitte threat intelligence product lines with a focus on intelligence collection, industry-focused threat landscapes, and client requests for intelligence.• Collaborate with Deloitte leadership to develop strategy and implementation planning for continuous improvement and growth of Deloitte’s threat intelligence service.• Ensure threat intel reports relevance, quality, value, and alignment with client priority intelligence requirements.• Partner with Deloitte’s premium threat intelligence clients to collect systematic feedback to continuously improve Deloitte’s threat intelligence service offering.• Manage vendor relationships to ensure business satisfaction and fulfillment of collection requirements aligned with Deloitte’s priority intelligence requirements frameworks.• Act as liaison between the Incident Response (IR) team and Threat Intel team to help with malware analysis requests, and threat context.• Collaborate with Threat Hunt team to improve hunt rules based on pro-active threat research.

Worldwide, Oo

• Proactive research into emerging commodity and targeted threats with a goal to produce quality actionable threat intelligence that helps organizations with their protection strategies.• Deliver tactical threat intelligence by automating the triage (collect, curate, disseminate) of open source (OSINT) and closed source (self driven research) threat indicators and threat information for easy consumption into existing security controls.• Deliver strategic threat intelligence in the form of human readable content tailored to help organizations understand the risk posed by a certain threat, provide short-term mitigation guidelines, and advice about long term protection strategies.• Emphasis on the WHO and the WHY behind a threat, along with the usually sought after HOW and WHAT.• Advice organizations about their risk posture, adequacy or inadequacy of currently implemented security practices & controls, what they can do to bolster their security posture, and how they can minimize their attack surface while not impacting business continuity.• Explore future threats to digital assets and help build innovative solutions to mitigate such threats.

Atlanta, Ga, Us

• Part of a team (Counter Threat Unit - CTU) that delivered Threat Intelligence services to clients.• Self-driven research and threat tracking to deliver intelligence about active and emerging information security threats.• Performed proactive all-source research to identify and characterize new threats, vulnerabilities, and risks to customer security context.• Provided direct assistance to customers and leveraged their experience and operational learning to build innovative solutions to complex incident response and security issues.• Used threat research to develop actionable intelligence at the tactical, operational, and strategic level.• Involved with generation of defensive countermeasures such as Snort based network signatures and Yara rules.• Delivered customer protection in the form of help-desk ticket responses, technical reports, briefings, webinars, and data feeds.• Provide expert advice to security researchers and customers on security strategy, policies, and procedures.• Performed in-depth malware analysis and reverse engineering to answer precise questions from customers for analysis requests.• Acted as point-of-contact for the Incident Response (IR) team and liaison between the IR team and Threat Intel team for malware analysis requests and threat context, to aid with IR engagements.• Worked with Threat Hunting team to improve hunt rules using the RedCloak Endpoint threat detection product.

Boca Raton, Fl, Us

• Lead Anti-malware research and technologies development.• Worked on a fairly new anti-malware product to improve detection technologies.• Worked with development team to design and integrate third-party scan-engine Software Development Kit (SDK) into the new anti-malware product.• Built processes and tools for automation of anti-malware product testing and installation on endpoints.• Performed malware analysis and reverse-engineering to aid with signature creation and malicious behavior profiling.• Automated processes for malware triaging - collection, dynamic analysis, false-positive/false-negative testing, and bulk processing to generate detection signatures.• Involved with documenting automation tasks and training newer team members.• Published blog articles and white papers related to evolving threat landscape and product enhancements.

Austin, Tx, Us

[Company History: Sunbelt Software, acquired by GFI Software]• Worked on the VIPRE anti-virus scan engine to improve detection technologies.• Implemented advanced detection technologies such as heuristic based and behavior based techniques within the scan engine.• Improved file-type scanning for various archive formats and packers. Wrote un-packing routines within the scan engine for various malware packers.• Implemented framework within the scan engine to scan and detect Windows based Rootkits.• Implemented framework for false-positive and false-negative testing of the anti-virus product.• Worked with engineering and quality testing teams to improve stability and scanning speed of the scan engine.• Performed malware analysis and reverse-engineering to aid with signature creation and malicious behavior profiling.• Collaborated with research team in the Philippians and helped train newer team members.

Palm Beach Gardens, Fl, Us

[Company history: Command Software Systems, acquired by Authentium, acquired by Cyren]• Worked on the F-Prot anti-virus scan engine (company based in Iceland) to improve detection technologies.• Improved file-type scanning for various archive formats and packers.• Wrote un-packing routines within the scan engine for various malware packers.• Implemented framework within the scan engine to scan and detect script based malware.• Designed and developed anti-virus scan-engine Software Development Kit (SDK) for "Command Anti-Virus" software product. Coordinated with project team members and cross-team stake-holders.• Designed and developed Graphical User Interface (C++ GUI) and database application (ODBC) for logging of activities for "Command Anti-Virus" software product.• Implemented advanced memory scanning with disinfection, scanning of Master Boot Record (MBR) and Boot Sector for malware on 32-bit and 64-bit Windows Operating Systems.• Performed malware analysis and reverse-engineering to aid with signature creation and malicious behavior profiling.• Automated processes for malware triaging - collection, dynamic analysis, false-positive/false-negative testing, and bulk processing to generate detection signatures.• Involved with documenting automation tasks and training newer team members.

Lafayette, La, Us

• Performed static and dynamic analysis of malicious code with a goal to improve detection technologies.• Completed Masters Thesis - Detect obfuscations in metamorphic viruses• Built a prototype tool called DOC (Detector for Obfuscated Calls) to statically analyze disassembled malicious binaries for obfuscations.• Published this topic in peer-reviewed journal and also presented at the IEEE International Working Conference on Source Code Analysis and Manipulation.• Patent granted: Technique to detect certain obfuscations in metamorphic code.

Masters, Computer Science

Bachelors, Computer Science