Anubhav Gain
Security Software Engineer · XDR/OXDR Architect · Rust & eBPF Specialist
Security software engineer and entrepreneur building production-grade security infrastructure at the intersection of systems programming, kernel engineering, and cloud-native architecture. Based in Ahmedabad, Gujarat, India.
Currently: Security Software Engineer at Infopercept Consulting (Invinsense XDR/OXDR platform) and CEO & Founder at TechAnv Consulting. 222+ academic research citations.
Experience
Security Software Engineer — Infopercept Consulting
Ahmedabad, Gujarat · July 2024 – Present
Core platform engineer on the Invinsense XDR/OXDR enterprise security platform:
- Single-tenant and multi-tenant XDR deployment architecture
- Custom OpenSearch Dashboard plugins for threat visualization
- Cross-platform Rust agents for telemetry collection and detection
- DevSecOps pipelines with automated security testing and shift-left enforcement
- Container orchestration with Docker and Kubernetes
- SIEM rule authoring, ML anomaly detection, OCSF schema integration
CEO & Founder — TechAnv Consulting
Vadodara, Gujarat · December 2022 – Present
Enterprise security consulting — XDR/OXDR architecture, Windows kernel driver development, Kubernetes platform engineering, cloud security (AWS, Azure), and zero-trust network design.
DevSecOps Engineer — Atcults
November 2023 – Present
Automated security testing pipelines, Terraform IaC, security monitoring and incident response automation, Kubernetes containerization and hardening.
IT Specialist — Parul University
November 2022 – October 2023
Palo Alto Networks firewall management, Red Hat Linux and Windows Server administration, AWS infrastructure, Microsoft Endpoint Configuration Manager.
Core Projects
Brief summaries — full details on the projects page.
| Project | Stack | Description |
|---|---|---|
| Leviathan | Rust · Ring 0 · KMDF | Windows kernel EDR/XDR framework — zero unsafe blocks, 5 kernel callbacks, MITRE ATT&CK mapping, ELAM support |
| Krustron | Go · K8s · GitOps | Open-source Kubernetes platform — unified multi-cluster management, CI/CD, observability, RBAC |
| Agni | Go · Bubble Tea · KVM | Firecracker microVM terminal UI — launch, configure, inspect, teardown without CLI flags |
| opensearch-rust-sdk | Rust · Async | High-performance OpenSearch Extensions SDK — async-first, strongly-typed, no JVM |
| ebpf-file-monitor | Rust · eBPF | File monitoring via inotify API and eBPF with timestamped audit logs |
Technical Stack
Systems Programming
- Rust (primary — safe systems, no-std, kernel-mode with windows-drivers-rs)
- Go (TUI, Kubernetes operators, REST APIs)
- C/C++, Python, Bash, PowerShell
Security Engineering
- Windows kernel (Ring 0, KMDF, SSDT/IDT/MSR, 5 kernel callbacks)
- EDR/XDR platform development
- eBPF (Linux observability and security)
- MITRE ATT&CK, OCSF, Wazuh SIEM, YARA
Platform & Infrastructure
- Kubernetes (multi-cluster, RBAC, GitOps), Terraform, Ansible, Docker
- AWS (EC2, S3, IAM, CloudWatch), Azure, Palo Alto Networks
Data & Observability
- OpenSearch (Extensions API, custom analyzers, ingest processors)
- Elasticsearch, distributed tracing, metrics pipelines
Education
| Degree / Certification | Institution | Year |
|---|---|---|
| B.Tech Cyber/Computer Forensics and Counterterrorism | Parul University | 2021–2025 |
| Licentiate Cybersecurity Management (93/100 — High Distinction) | Charles Sturt University | 2023 |
| Licentiate Ransomware Techniques | Charles Sturt University | 2023 |
| C3SA Premium Edition | — | 2024 |
| IBM Cybersecurity Analyst Professional Certificate | IBM | 2023 |
| AWS Educate — Getting Started with Security | AWS | 2023 |
| Open Source Software Development, Linux and Git Specialization | — | 2023 |
| Harvard CS50 | Harvard | — |
| Cisco Networking Basics & Introduction to Cybersecurity | Cisco | — |
Industry Engagements
| Organization | Engagement | Focus |
|---|---|---|
| JPMorgan Chase & Co. | Data Analyst — Fraud Detection | Financial payment fraud analysis, prevention strategy |
| PwC | Cybersecurity | Phishing simulation, integrated information defense |
| AIG | Zero-day Response | Ransomware bypass techniques and mitigation |
| Clifford Chance | ICO Regulatory Compliance | Data leak damages claims, regulatory framework |
Research
222+ citations on Google Scholar — EEG-based emotion recognition (LSTM networks), cybersecurity automation, kernel security, and defense mechanisms.
Online
Building robust, scalable defenses — one line of Rust at a time.