Hello, I'm Nitya 👋

Threat Researcher focused on email security & campaign detection.

I analyze high-volume enterprise email traffic, investigate phishing / BEC and malware campaigns, and build high-confidence detections using regex, telemetry, and IOC-driven tracking.

Quick highlights

  • 100,000+ enterprise emails analyzed
  • 1,000+ malicious domains / URLs blocked
  • HTML / PDF / JS / VBS / PS / HTA / JAR analysis
  • Kibana + Elasticsearch campaign monitoring

About

A snapshot of what I do and the problems I like solving.

🔍

What I work on

I specialize in email threat detection, phishing / BEC triage, and attachment / file analysis. My day-to-day includes URL / domain investigations, OSINT checks, campaign correlation, and building scalable detections.

🎯

How I approach it

I focus on high-confidence outcomes, quick verification, strong evidence, and minimal false positives. I validate detections against live telemetry and monitor emerging campaigns to adjust blocks early.

Experience

Where I've worked and what I've shipped.

Sophos Technology Private Limited

Jan 2024 — Present

Threat Researcher 1

  • Analysed 100,000+ enterprise emails, accurately identifying spam submissions and blocking them.
  • Assigned accurate verdicts across categories such as phishing, malware threats, BEC, Nigerian, Data Champions, CS and spam campaigns impacting large customer environments.
  • Performed URL and domain investigations, resulting in blocking actions on 1,000+ malicious spam and phishing domains and URLs.
  • Used regex-based rules to catch and block high-risk campaigns.
  • Monitored active and emerging campaigns using Kibana, LSP, and Elasticsearch, and validated regex-based blocks to prevent potential false positives.
  • Investigated 100+ malicious and suspicious files, including HTML, PDF, JavaScript, VBS, PowerShell, HTA and JAR to understand attacker techniques and campaign patterns.

Burgwalden, Horseshoe BG, Germany

Jun 2022 — Aug 2022

Web Developer Intern

  • Designed and developed an internal admin dashboard to view and manage customer and program data, adding login-based access and role-based restrictions so only authorized users could see sensitive information.
  • Built search, filtering, and data-fetching features, ensuring inputs were validated and data remained accurate while being accessed or updated.
  • Followed secure development practices, using encrypted API communication and proper session handling to keep data safe during day-to-day usage.

Skills

Core strengths grouped for quick scanning.

Email & Threat Analysis

  • Email Analysis (Spam, Phishing, Malware)
  • Domain & URL Reputation Analysis
  • Non-PE File Analysis (JS, VBS, PowerShell, Python)
  • Campaign & IOC Analysis
  • OSINT Investigations

Detection & Monitoring

  • Regex-based Detection Rules
  • Campaign Monitoring & Validation
  • Kibana
  • LSP
  • Elasticsearch

Security & Web

  • OWASP Top 10
  • Secure Authentication & Authorization
  • Input Validation & Data Integrity
  • React.js
  • Node.js
  • REST APIs

Projects

Things I've built from scratch.

IOC Enrichment CLI

Command-line threat intelligence tool

Developed a command-line tool that accepts URLs, domains, IPs, and hashes, enriches indicators through external APIs, and exports normalized investigation reports. Implemented caching, error handling, rate-limit handling, and structured output for repeatable analyst workflows.

Code

Education

Academic background.

Swami Keshvanand Institute of Technology, Management & Gramothan

2020 — 2024

B.Tech (Honors), Computer Science

CGPA: 9.73 / 10.0

Saint Paul's Senior Secondary School

2018 — 2020

All India Senior School Certificate Examination — 92.20% (2020)

All India Secondary School Examination — 94.20% (2018)

Highlights & Community

Recognition, milestones, and community involvement.

🏆

Academic Excellence Award

2022 — 2023

Issued by SKIT, Jaipur for outstanding academic performance.

🎨

GDSC WOW'23, Jaipur

Google Developer Student Club

Design Team member — contributed to event branding and visuals.

💻

GSSoC'22

GirlScript Summer of Code

Open-source contributor — collaborated on community-driven projects.

Latest Blogs

Thoughts from my Medium.

Connect

Have a question or just want to say hi? Send a message.

Get in touch

I usually respond within 24–48 hours.