■ Vinayak Agrawal / Security Open to engagements

Threat intelligence · Investigations · SOC · OT/ICS

From the analyst desk to the plant floor.

I'm Vinayak Agrawal, a security analyst who has supported investigations with Indian law-enforcement and national agencies, triaged alerts in an enterprise SOC, and now secures industrial control networks at one of India's largest infrastructure groups.

Dragos CTF 2026
28,560of 28,600 pts · solo
Global rank
Top 25%268th of 1,102 teams
ISA/IEC 62443
IC32Cybersecurity fundamentals
Domains worked
4CTI · Investigations · SOC · OT

01 Coverage

Hands-on at every layer of the stack

Most analysts know one layer well. I've worked from intelligence and attribution at the top, through the enterprise SOC, down to OT networks and field commissioning.

INTEL

Threat intelligence & OSINT

Tracked APT groups and produced intelligence reporting at a DRDO lab and an OSINT reporting firm.

  • APT tracking
  • OSINT
  • CTI reporting
  • MISP
CASES

Investigations support

Worked on numerous cases alongside Indian law-enforcement and national agencies, turning open-source and technical data into evidence they can act on.

  • Digital footprinting
  • Attribution
  • Case reporting
L4–L5

Enterprise SOC

Alert triage and escalation in an enterprise-scale security operations centre covering a multi-business conglomerate.

  • Alert triage
  • Escalation
  • Incident handling
L1–L3.5

OT / ICS security

Running OT visibility and intrusion detection: platform access, alert tuning with the vendor, upgrades, and OT security assessments at cement plants.

  • Armis Centrix
  • OT IDS
  • ISA/IEC 62443
  • Purdue model
L0–L1

Field & commissioning

Participated in site acceptance testing (SAT), and maintain a home ICS lab attacking and defending PLC protocols.

  • SAT
  • OpenPLC
  • Modbus
  • DNP3

02 Experience

Where I've done the work

Most recent first.

2026 — nowAdani Group

OT Security

Operational technology security team

  • Operate OT asset visibility (Armis Centrix) and on-prem intrusion detection across industrial sites.
  • Drive alert tuning cases with the vendor to cut noise and surface real threats.
  • Own user access and platform upgrades for the OT security toolset.
  • Participated in site acceptance testing (SAT) for industrial systems.

2026Adani Group

Cyber SOC Analyst

Enterprise security operations centre

  • Triaged and escalated security alerts for an enterprise environment spanning multiple businesses.

2025 — 2026Adani Group

Cybersecurity Go-to-Market

Cybersecurity services team

  • Took part in OT security assessments at three cement plants.

6 monthsOSINT reporting firm

OSINT & Investigations Analyst

Intelligence reporting

  • Produced open-source intelligence reporting.
  • Supported investigations for Indian law-enforcement and national agencies across numerous cases.

InternshipDRDO laboratory

Cyber Threat Intelligence Intern

Defence Research & Development Organisation

  • Researched APT groups and applied OSINT to cyber threat intelligence.

Internship · 2 monthsONGC

Intern

Oil and Natural Gas Corporation

  • Early exposure to the energy sector, India's largest oil and gas producer.

03 Proof

Results you can check

I may not know something today. I research it, apply the tools, and come back with the right answer.

Dragos CTF 2026 · OT capture the flag · solo

28,560 / 28,600

99.9% of available points, competing alone against teams. Ranked 268th of 1,102 teams worldwide.

Certification

ISA/IEC 62443 · IC32

Cybersecurity fundamentals for industrial automation. Next on the path: IC33, IC34, IC37.

Training

Red teaming

Completed offensive security courses, so I defend knowing how attackers move.

Lab

Home ICS range

Kali-based lab with OpenPLC, Modbus and DNP3 tooling, plus a MISP threat-intel instance.

Education

B.Tech, ICT

Information and Communication Technology.

04 Engage

What I can take on

Scoped, fixed-outcome engagements for teams that need someone who understands both IT and the plant.

OT visibility & alert tuning

Get an OT IDS or asset-visibility platform producing alerts your team trusts, not noise they ignore.

For plant & OT teams

62443 readiness support

Zone and conduit mapping, gap lists against ISA/IEC 62443, and a plain-language remediation plan.

For asset owners & integrators

OSINT & threat intelligence

Footprinting, threat-actor profiling and intelligence briefs that answer a specific question.

For security & risk teams

SOC triage playbooks

Triage and escalation runbooks that bring IT and OT alerts into one workflow.

For SOC leads

05 Contact

Let's talk about your risk.

Roles, contracts or speaking. I reply within two working days.

Email

hello@vinayaksec.com

LinkedIn

linkedin.com/in/vinayaksec

Location

India · open to remote