Tanisha Brahma

Detection Engineering & Applied Cryptography

• Rebuilt a tier-1 payments processor's SOC ruleset as version-controlled Sigma — 912 rules migrated, false positives down 68% without losing a single true positive.
• Led incident response for a supply-chain signing-key compromise: containment in 3h 14m, 2,481 artefacts revoked, zero downstream impact.
• Shipped a hybrid X25519 + ML-KEM-768 handshake across 4,900 payment endpoints with 1.8ms mean overhead and zero downtime.
• Maintain Cryptkit, an open-source constant-time primitives library — 41k downloads a month, 23 contributors, timing tests that fail the build in CI.

Sigma · Rust · Python · Splunk ES · liboqs · ProVerif

Tier-2 Analyst → Detection Lead

• Started on a tier-two console triaging endpoint alerts; moved into detection engineering when it became clear the rules were the product, not the console.
• Led 23 incidents from first alert through post-mortem — containment first, attribution last, and a write-up that names the control that failed.
• Learned cryptography by necessity: half the incidents traced back to a primitive used wrongly — a nonce reused, a key stored beside its data, a comparison that leaked timing.

Splunk ES · Sigma · Python · MITRE ATT&CK