We are building an intelligent virtual assistant for Security Operations. Every security analyst/incident responder should get an assistant that can perform tasks, assist with day to day tasks related to detection and response.

Devo acquired LogicHub in Sep 2022

LogicHub is making threat detection and response much better with the help of Automation and AI

Sumo Logic is the next generation log management and analytics company that leverages Big Data for real-time IT insights. The company’s cloud-based service provides customers with real-time interactive analytics at unprecedented petabyte scale. The Sumo Logic service is powered by patent-pending Elastic Log Processing™ and LogReduce™ technologies, and transforms log data into actionable insights for IT operations, application management, and security and compliance teams. Unlike expensive and complex premise-based solutions, the Sumo Logic service has a low TCO, can be deployed instantly, scales elastically and requires zero maintenance. The company is based in Silicon Valley and is backed by Greylock Partners and Sutter Hill Ventures. For more information, visit www.sumologic.com.

Built a data warehouse, and supporting infrastructure including an ETL framework to bring data from various mysql databases, csv files etc into one place. As part of this project, evaluated a wide variety of database technologies, reporting solutions and other BI softwareDesigned, implemented and maintained data warehouse and reporting infrastructure.Worked with marketing, business development, product and pr teams to help glean insights from data.

Founded this company to build a solution for email overload problem. Bootstrapped the company for about 18 months, setup and ran a small 4 person engineering team, defined product, developed prototypes, did user tests to validate product features and usability.

Other positions at this company in reverse chronological order – Development Manager, Technical Lead, Principal Software Engineer, Senior Software Engineer, Software Engineer.Technical Accomplishments:* Invented and developed a pattern discovery module to automatically mine attack patterns from security events. * Designed and developed a customizable threat prioritization module that rates security events based on a variety of factors like vulnerabilities, safeguards, criticality of attack etc. Patent here* Technical lead for correlation team. In this position worked on various modules like high performance rule engine, reporting module to report over billions of events, high throughput filtering engine, and statistical monitoring engine. Go-to person for all modules that required algorithms/data mining/expert systems/business intelligence.Management Experience:* Managed two teams – correlation team (built filtering/prioritization/reporting/data visualization/data mining engines/components), and solutions team (built custom content packs, which got deployed on ESM, ArcSight’s flagship Security Event Monitoring product).* Implemented scrum and various engineering process improvements like continuous integration, code modularization etc. over the years* Strong customer focus, worked with sales engineering, professional services, customer support engineers, customers and prospects to provide solutions, present ArcSight’s correlation technologies and collaborate on development efforts and roadmap.

Not a whole lot ;)