Krishnan Subramanian
About
Detail
Senior Staff Engineer - Office of the CTO
San Ramon, California, United States
Résumé
Jobs
verified_user
0% verified
Senior Staff Engineer - Office of the CTOIllumioMar 2025 - Current (1 year 6 months)Providing deep expertise & technical strategy to Product, Sales & Engineering teams on key focus areas: SecOps, Detection Engineering, Product Security, Security Data Pipelines, Enterprise AI Mesh and Threat Research. * Leveraging distributed Agentic Swarms for building hierarchical multi-tier detection model * Applying Zero Trust / first principles to AI Data center (RDMA / GPU, Disaggregated AI inference Infrastructures) * Enterprise AI Mesh: Traffic fingerprinting for discovery & inventory across the enterprise AI ecosystem. * High volume robust security data pipeline design leveraging Clickhouse & Iceberg / parquet- Senior Engineering Manager, Threat DetectionAppOmniApr 2024 - Mar 2025 (1 year)Leading a talented team of Engineers Responsible for running a very high volume (5M events / sec) streaming SaaS threat detection platform. * Help scale the team by hiring a key principal engineer, frontend and staff engineer * Delivered UEBA beta version for SaaS security in 90 days * Drove overall alignment within our team that enabled the Blackhat Talk: "Modern Kill Chains: Real World SaaS Attacks and Mitigation Strategies".
- Engineering Manager - Menlo LabsMenlo Security IncApr 2022 - Apr 2024 (2 years 1 month)- Responsible for the detection infrastructure & security data pipelines that powers the Security Research team.
- Staff Security Research EngineerMenlo Security IncJan 2021 - Apr 2022 (1 year 4 months)- Helped conceptualize and build the HEAT Shield and HEAT detection features on the product - Identified and reported several threat campaigns targeting customers - Interfacing with customer security teams to get feedback / improve the fidelity of security content shared with them - Built out our internal SIEM for security research & development efforts
- Security Research EngineerMenlo Security IncOct 2018 - Dec 2020 (2 years 3 months)- Architected and built a framework that helps identifying and reporting threats from product telemetry - Worked cross functionally to build a product initiative "iSOC" that channelizes threat research data to customer SOC teams. - Active threat hunting to identify interesting attacks - Thought leadership through blogs, threat advisory reports, conference talks and podcasts.
- Security Software EngineerMenlo Security IncJun 2015 - Oct 2018 (3 years 5 months)Core member of the team that handles policy management for the Menlo Security Product. - Delivered several key features for the core security policy engine (Features involving network protocols such as: HTTP(S), SMTP, ICAP, SAML, SSH). - Microservices to integrate the product with third party threat intelligence APIs - Developed specific automation tools to catch bugs, performance/scalability issues, backwards/forwards compatibility issues during QA build process. - Backend APIs (Nodejs/Python), Redis, AWS, Druid
- Tech Yahoo, ParanoidYahooApr 2014 - Jun 2015 (1 year 3 months)Part of the Yahoo! Threat Response team - Detect and mitigate APTs, Targeted Attacks and Cybercrime on a platform that caters ~1 Billion users. - Log Analysis, Memory/Disk Forensics, Anomaly detection for abusive/intrusive activity. - Contributed towards development, automation and tools to aid the investigation process - Managed a third party Anomaly Detection product, working with professional services team to fine tune rules for User Behavior and VPN logs for intrusion detection. - External bug reporting and tracking: bug bounty program management through a third party security platform. - Participated in Incident Response on-call rotation.
- Security Research EngineerZscaler IncMay 2012 - Apr 2014 (2 years)Zscaler Inc., A leader in the Magic Quadrant for Secure Web Gateway published by Gartner Inc., operates on a massively scalable cloud based architecture providing SAAS based security service to end users. - Triage and resolve security issues on a daily basis - Develop and maintain security research tools - Discover and analyze new threats and write signatures - Data mining: log correlation and analysis to identify attack vectors - Mobile Traffic Fingerprinting: analyze iPhone, Android apps for potential information leakage - Script test cases to validate API of developed products
- Graduate Research AssistantGEORGE MASON UNIVERSITYFeb 2011 - May 2012 (1 year 4 months)- Web Application Programmer at the Krasnow Institute of Advanced Study: Develop & maintain a live research portal - *nix server administration: Solve typical needle-in-a-haystack issues on a daily basis
- CProject AssociateCentre for Industrial Consultancy Sponsored Research IIT MadrasAug 2007 - Jul 2009 (2 years)- Software & Web Programmer: Engineering Unit, IIT madras. - Developed software to aid infrastructure engineering & management - Tailoring the SDLC based on customer feedback - Implemented a prototype for a Research Project on Design Interface Management - Organized and steered 3 International technical conferences
Education
verified_user
0% verified
- Bachelor of Technology (B.Tech, Information TechnologyAnna University Chennai
- SSankara schoolSankara school
- Executive Program, LEADStanford University Graduate School of BusinessOct 2023 - Mar 2025 (1 year 6 months)
- Master of Science (M.S, CyberForensics & Information SecurityGEORGE MASON UNIVERSITYJan 2011 - Jan 2012 (1 year 1 month)Academic Coursework: - Network Forensics/Security - Intrusion Detection - Information Security Principles - Malware Reverse Engineering
Projects (professional or personal)
verified_user
0% verified
- ZZAP: Zscaler Application ProfilerZAP is web based tool designed to streamline the capture and analysis of HTTP(S) traffic from mobile applications.ZAP is capable of analyzing traffic from both iOS and Android. Visit http://zap.zscaler.com/about.php for more information. Worked as lead developer for this project. Also worked on all of the other aspects of it like system administration, maintenance, etc.