Headline

Senior Security Engineer | Detection Engineering | Threat Hunting | Incident Response | Cloud Security (AWS & Azure) | SIEM | Splunk | Microsoft Sentinel | Google Chronicle | Python

About

Cybersecurity professional with 5+ years of experience in Detection Engineering, Incident Response, Threat Hunting, Cloud Security, and Security Operations across AWS, Azure, and hybrid enterprise environments. Experienced in designing MITRE ATT&CK-aligned detections, building SIEM use cases, automating security operations, and investigating cloud, identity, endpoint, and network threats. Skilled in developing scalable detection strategies, improving security visibility, and reducing incident response times through automation and behavioral analytics. CORE EXPERTISE • Detection Engineering & Threat Hunting: MITRE ATT&CK, Threat Detection, Behavioral Analytics, IOC Analysis, Threat Intelligence • Security Operations & Incident Response: SOC Operations, Incident Response, Digital Forensics, Alert Triage, Root Cause Analysis • SIEM & Security Automation: Splunk Enterprise, Microsoft Sentinel, Google Chronicle, ELK Stack, SOAR, OpenTelemetry • Cloud Security: AWS, Azure, GuardDuty, CloudTrail, AWS Config, CloudWatch, IAM, Zero Trust • Endpoint & Identity Security: CrowdStrike Falcon, Identity Monitoring, Privileged Access Monitoring, Endpoint Detection & Response • Automation & Scripting: Python, SQL, Azure Logic Apps, ServiceNow, Power BI, Kibana • Compliance & Risk Management: NIST, ISO 27001, PCI DSS, CIS Controls, Security Monitoring, Vulnerability Management • Cloud & Infrastructure Security: Log Management, Security Analytics, Threat Modeling, Security Architecture, Security Monitoring For more details, please contact Vignitha07@gmail.com

Location

Irving

AI stack

antigravity

codex

opencode

Work experience

Security Operations Engineer (Detection Engineering & Cloud Security) at KPMG, Jun 2024 - Present · 2 yrs 3 mos, United States, • Delivered AI-Driven Zero Trust Cloud Security Program, monitoring AWS via Splunk and Google Chronicle, analyzing GuardDuty, CloudTrail, and VPC Flow Logs to detect credential abuse, ransomware, insider threats, and IAM anomalies, improving detection coverage by 24%. • Performed incident response across hybrid cloud by analyzing CloudTrail, GuardDuty, AWS Config using Python, SQL, and Excel, while building Power BI and Kibana dashboards for anomaly tracking, executive reporting, and SOC visibility, reducing investigation time by 18%. • Applied AI-assisted behavioral analytics and machine learning–based anomaly detection models to identify suspicious IAM role assumptions and API misuse, increasing early threat detection accuracy by 22%. • Conducted proactive threat hunting across AWS IAM, CloudWatch, Elastic, CrowdStrike Falcon, and Zeek, identifying privilege escalation, malicious API activity, and data exfiltration patterns, improving Mean Time to Detect (MTTD) by 20%. • Engineered cloud SIEM ingestion pipelines using OpenTelemetry and streaming log architecture, integrating AWS CloudTrail, VPC Flow Logs, Elastic, CrowdStrike, and Chronicle for unified detection engineering, improving telemetry reliability and data accuracy by 26%. • Designed next-generation detection engineering using MITRE ATT&CK-aligned analytics, graph-based correlation models, and entity behavior analytics to strengthen cloud and identity threat coverage and reduce alert noise by 15%. • Automated SOC operations using Python-driven SOAR orchestration combined with AI agent workflows and event-driven automation, enabling adaptive incident response and reducing mean incident handling time by 19%.

Security Operations Analyst at HSBC Technology, Aug 2020 - May 2023 · 2 yrs 10 mos, India, • Directed enterprise security monitoring improvements across global banking systems by optimizing Microsoft Sentinel and Splunk configurations, aligning detection use cases with ISO 27001, NIST, PCI-DSS, and RBI regulations, increasing hybrid cloud visibility and detection coverage significantly. • Architected centralized log management pipelines for core banking, SWIFT, and digital payment applications using syslog-ng, Winlogbeat, Azure Event Hubs, and ELK Stack, enhancing telemetry coverage by 18% while minimizing false positives through MITRE ATT&CK-based analytics. • Accelerated incident response operations by automating workflows with Azure Logic Apps, Python, and ServiceNow integrations, containing phishing, malware, and privileged access incidents efficiently, reducing mean time to respond by 25% across regulated banking environments. • Performed enterprise-wide vulnerability assessments and configuration audits across on-premises and Azure banking infrastructure using Nessus, OpenVAS, and CIS benchmarks, remediating critical vulnerabilities 22% faster while maintaining continuous compliance with PCI-DSS requirements. • Strengthened cloud and container security by partnering with DevSecOps teams to implement monitoring for Kubernetes, Docker, and Azure workloads, integrating enriched alerts into Sentinel and Splunk dashboards, reducing recurring high-severity incidents across platforms. • Pioneered the cybersecurity awareness culture by conducting phishing simulations, policy-driven training sessions, and secure banking workshops, decreasing employee-related security incidents by 12% and improving threat reporting maturity across business and technology teams.

Education

Masters, Digital forensics and cyber security, University at Albany

Bachelor's degree, Forensic science, Adikavi Nannaya University (AKNU), Rajamahendravaram