Sudeep Singh Email & Phone Number

London, England, United Kingdom

London, England, United Kingdom

Lead the research on advanced targeted attacks / APTs from all aspects.

London, England, United Kingdom

Develop methodologies to hunt, discover, research and track latest instances of targeted attacks.

London, United Kingdom

I played a critical role in the research and development of detection technology of FireEye’s Network, Email and Endpoint security products.My main contributions include the following:* Reverse engineering the latest malwares and exploits in depth.* Reverse engineering of malwares/exploits for all platforms – Windows, Linux and Mac OSX.* Develop detection techniques based on the research done on malwares and exploits.* Enhance FireEye’s products with new detection techniques.* Discover evasion techniques and enhance the product detection accordingly.* Authored multiple blogs which included targeted attacks on government, military and banks in different regions of the world.* Discovered several first instances of exploits in-the-wild targeted towards applications such as Microsoft Windows OS, Microsoft Office, Internet Explorer and so on.

Worked in Global Security Incident Response division of Informatica performing root cause analysis of security incidents of all the regions.Correlation of malware and exploit alerts generated by various sources using Q1 SIEM tool.Sources of alerts included WildFire and firewalls from Palo Alto Networks.Reverse engineering of malwares identified during Incident Response and while processing alerts from WildFire.Setup the forensics solution in Informatica leveraging Encase Enterprise Forensics software suite.

Worked in the Incident Response and Threat Intel division of Global Security Response team of Honeywell.Performed root cause analysis on alerts generated by different sources such as FireEye network appliances, Mandiant endpoint agents and Antivirus.Worked on correlation of events generated by different sources and implemented all the cycles of Incident Response.Performed reverse engineering of malwares, threat intel attribution and generation of internal reports covering malware Indicators of Compromise (IoC).