Maneesha Kakarla

• Configured, deployed, and managed security technologies, including SIEM solutions (Splunk), Microsoft Defender (EDR/XDR), firewalls, and IDS/IPS systems, significantly improving detection and response capabilities. • Analyzed security events using Splunk, facilitating prompt incident triage and comprehensive investigation documentation, which accelerated incident response times by 30%. • Developed and deployed automated SOAR playbooks using Python, streamlining incident response workflows such as alert enrichment, IOC lookup, and ticketing, reducing analyst response time by 40% and increasing SOC efficiency. • Translated complex security risks and technical findings into clear, actionable insights for both technical teams and non-technical executives and stakeholders improving decision-making on security strategies. • Performed advanced threat hunting across Splunk SIEM and Microsoft Defender EDR using tailored IOC and behavior-based analytics. Identified and contained sophisticated malware campaigns and lateral movement techniques, cutting average breach dwell time by 30% and increasing zero-day detection rates. • Conducted network forensics analysis using Wireshark to capture and inspect packet-level data, identifying anomalies such as C2 communication, data exfiltration, and malware activity. • Collaborated with cross-functional IT, legal, and executive stakeholders to coordinate incident response efforts, ensuring clear communication and alignment across teams and driving effective security issue remediation. • Delivered cybersecurity awareness training to employees, significantly reducing phishing-related incidents by 25%.

• Assisted in secure code reviews for web and mobile applications, identifying 30+ security issues (SQL Injection, XSS, hardcoded credentials) and escalating findings to senior engineers for remediation. • Assisted in maintaining fine-tuning firewalls and IDS/IPS, blocking 99.9% of anomalous traffic and improving perimeter defense across corporate and cloud networks. • Analyzed security events using Splunk, facilitating prompt incident triage and comprehensive investigation documentation, which accelerated incident response times by 30%. • Applied Cyber Kill Chain and MITRE ATT&CK frameworks to analyze and disrupt adversary behaviors, enhancing threat detection capabilities and streamlining incident response processes. • Supported senior analysts in incident triage and containment, drafting reports for phishing and malware cases. • Participated in user access reviews, verifying appropriate permissions and flagging anomalies for remediation. • Conducted comprehensive vulnerability assessments across enterprise systems using Qualys and Nessus. Prioritized remediation efforts by integrating CVSS scoring with business impact analysis to drive timely patch deployment and reduce critical risk exposure. • Participated in SANS security summits, integrating the latest offensive and defensive strategies into enterprise security programs.