Dhruv Madaan

About Dhruv Madaan

With a foundation in Computer Engineering from JMIT, I currently serve as a Cyber Threat Detection Engineer at Cybrovate. My role involves developing advanced, MITRE-aligned detection mechanisms to enhance security across Windows, AWS, Azure, and GCP environments. I design scalable Python-based detection logic to fortify cloud, identity, and endpoint security, while leading a team of junior engineers. At Cybrovate, I focus on creating behavioral and rule-based detections, mentoring engineers, and implementing solutions to detect and mitigate diverse security threats. My work underscores a commitment to leveraging cloud and programming expertise to enhance digital infrastructure protection.

Experience

1. Software Engineer

   Cybrovate

   Feb 2025 — Present · Noida, IN

   Leading a team of 6 junior detection engineers while developing advanced, MITRE-aligned threat detections across Windows, AWS, Azure, and GCP environments. I design and implement scalable Python-based detection logic that strengthens cloud, identity, and endpoint security.Responsibilities:• Build behavioral and rule-based detections using Python for CloudTrail, Azure Activity Logs, GCP Audit Logs, Windows Event Logs, and Linux logs.• Mentor and guide junior engineers in detection development, log analysis, Python coding, and simulation workflows.• Perform multi-event correlation to detect privilege escalation, credential theft, suspicious process execution, identity abuse, cloud resource misuse, and anomalous activity.• Simulate attacker TTPs to validate detections and generate test scenarios.• Develop reusable detection frameworks with caching, structured field extraction, threshold checks, and historical correlation.• Normalize raw logs into consistent schemas across AWS, Azure, GCP, Windows, and Linux for streamlined detection workflows.• Map detections to MITRE ATT & CK and cloud threat models.• Tune detections to reduce false positives using contextual data, frequency analysis, and anomaly detection techniques.Impact:• Increased visibility across cloud, endpoint, and identity layers.• Reduced false positives through behavior-driven logic and correlation-based detection.• Improved operational efficiency and team output by leading 6 junior engineers through structured processes, reviews, and continuous skill development.

Education

• Seth Jai Prakash Mukand Lal Institute of Engineering & Technology (JMIT)

  Bachelor of Technology - BTech, Computer Engineering