I
Ivan Koshkin
About
Detail
Senior Detection Engineer (Lead), Co-Founder
Saratoga Springs, Utah, United States
Résumé
Jobs
verified_user
0% verified
Staff Detection EngineerAdobeFeb 2026 - Current (9 months)- Senior Detection EngineerAdobeJan 2024 - Feb 2026 (2 years 2 months)Served as a technical leader to identify, plan, and execute on detection and response strategy while building the foundation to a new team. Collaborated across functions and organizations to foster innovation across business units. Implemented agile development processes, improved feedback loops to stakeholder teams, and spearheaded metrics development and tracking.
- Security AnalystAdobeNov 2021 - Jan 2024 (2 years 3 months)Helped mature the Detection Engineering processes as an individual contributor and tech lead. Analyzed security alerts, performed threat hunting functions to identify detection opportunities, drove incident escalation through resolution, and built new content to improve coverage and tune existing rules.
- Senior Analyst - PCI SecurityUtah Valley UniversityDec 2019 - Nov 2021 (2 years)Managed the networking, infrastructure, and security for dozens of campus merchants and subsidiaries of Utah’s largest university. Lead DLP implementation efforts by applying technical and administrative controls to protect sensitive data university-wide. Additional duties included configuring and maintaining firewalls, patch management, PCI compliance, network architecture, and endpoint/server hardening.
- Co-FounderMetis Cyber LLCMar 2019 - Current (7 years 8 months)Consulted small businesses and startups, assisted in the design and implementation of cloud infrastructure (AWS) and web hosting services. Saved on costs/overhead while improving security posture.
- Security Specialist IIIUtah Valley UniversityJan 2019 - Dec 2019 (1 year)Assisted the university’s security team by maintaining the main DLP product, as well as automating/improving processes. Built applications (mainly using PHP) to interface with existing security tools to improve operability and save time for employees by automating tasks.
- Jr. Systems AdministratorWavetronixSep 2016 - Jan 2019 (2 years 5 months)Managed communication systems hardware/software and Active Directory for 250+ users. Drove projects utilizing O365 and Azure cloud services. Automated mundane tasks and workflows using PowerShell.
- Intelligence Analystth Special Forces Group AirborneJan 2015 - Jul 2021 (6 years 7 months)Lead an intelligence operations cell as a non-commissioned officer. Contributed to various mission sets that led to improving the national security of United States and its allies.
Education
verified_user
0% verified
- M.S. Cybersecurity and Information Assurance, Information TechnologyWestern Governors UniversityJan 2021 - Dec 2022 (2 years)
- B.S. Computer Forensics and Security, Information TechnologyUtah Valley UniversityJan 2013 - Dec 2020 (8 years)
- High School Diploma, Enhancement in MathematicsHerriman High SchoolJan 2010 - Dec 2013 (4 years)
Awards
verified_user
0% verified
- tArmy Commendation Medalth Special Forces GroupApr 2021
- SJoint Service Commendation MedalSpecial Operations Command CentralNov 2017
Publications
verified_user
0% verified
- SSAINTCON 2025 - Ivan Koshkin - Red + Blue = Better SecuritySAINTCONOct 2025Red + Blue = Better Security: Adobe's Purple Team Success Story Preventing adversaries from breaching networks has been the traditional approach to cybersecurity, but as the industry continues to mature, a heightened focus on detection and response is necessary to strengthen organizations’ abilities to identify and evict adversaries following a compromise. That’s why it’s important to have a “practice squad”, AKA Red Team, to test blue teams’s capabilities and collaborate to improve detection and response processes. In this talk, I’ll share how running collaborative Purple Team exercises (offensive Red + defensive Blue) has helped us improve our custom detection capabilities, making it harder for adversaries to hide within our environment a
- CPurple teaming in the modern enterprise.CyberWireXMay 2025In large enterprise software companies, Red and Blue Teams collaborate through Purple Teaming to proactively detect, respond to, and mitigate advanced threats. In this episode of CyberWire-X, N2K's Dave Bittner is joined by Adobe’s Justin Tiplitsky, Director of Red Team and Ivan Koshkin, Senior Detection Engineer to discuss how their teams work together daily to strengthen Adobe’s security ecosystem. They share real-world insights on how this essential collaboration enhances threat detection, refines security controls, and improves overall cyber resilience.
- SSAINTCON 2023 - Ivan Koshkin - The Lifecycle of Detection EngineeringSAINTCONOct 2023Idea to Action: The Lifecycle of Detection Engineering In the ever-evolving world of cybersecurity, timely and accurate detection remains a cornerstone of a strong defense. But how are these detections conceptualized, validated, optimized, and deployed? In this talk, we'll pull back the curtain on the lifecycle of Detections Engineering, from the spark of an idea to its deployment in the real world. Join us to gain insights into the process that keeps our SOCs and analysts vigilant against threats.