Endpoint Security Engineer · SOC Analyst · DFIR · Threat Hunting · EDR/XDR
3+ years at Sophos owning P1/P2 incident response, EDR/XDR investigations, and threat hunting across enterprise Windows, macOS, and Linux environments. Ranked Top 10 globally (FY25) and Top 2 Community Contributor globally across all of CY25. Targeting SOC, DFIR, and Security Engineering roles at MNCs worldwide.
I'm Rutvik Chavda — an endpoint security engineer who spent 3+ years at Sophos handling the hardest escalations across enterprise Windows, macOS, and Linux environments. My work sits between an alert firing and a definitive root cause with a clean containment path.
I reconstruct attack timelines using Splunk SIEM correlation, trace lateral movement through Windows Event Logs and Sysmon telemetry, write Live Discover SQL queries to hunt threats across data lakes, and map every finding to MITRE ATT&CK TTPs. I own cases end to end — not just raise tickets.
Ranked Top 10 globally (FY25) at Sophos and earned five community awards in CY25 — all four quarterly recognitions plus the full-year title (Top 2 globally). Currently studying CEH and ISC2 CC. Also exploring AI Security and LLM threat landscapes.
Every skill from real enterprise work — 500+ escalations, ransomware incidents, lateral movement cases, and full P1/P2 lifecycle ownership. Not theory.
From intern to L2/L3 endpoint security engineer — owning enterprise P1/P2 incidents, threat investigations, and earning global recognition.
Real domain areas from 3+ years of enterprise security work — investigations I've run, tools I've used daily, and methodologies applied on live cases.
Endpoint security, SIEM operations, cloud, offensive security, and networking. Two actively in progress.
Four consecutive quarterly recognitions and the full-year top contributor title — ranked globally inside a company with thousands of technical engineers worldwide.
Targeting SOC Analyst, DFIR, Threat Intelligence, and Security Engineering roles at MNCs worldwide. Response within 24 hours.