Sai Sudha

Cybersecurity Analyst with ∼3 years of professional experience in email security operations, threat investigation, and detection validation, with a foundation in Java application development. Experienced in investigating phishing, spam, and malicious email campaigns by analyzing emails, URLs, domains, attachments, file hashes, and IOCs, validating True Positives (TP) and False Positives (FP), and collaborating with Detection Engineering to improve detection quality. Proficient in Kusto Query Language (KQL), and supporting email security detection workflows.

Built an end-to-end Microsoft Sentinel lab by onboarding Windows endpoints through Azure Arc, configuring the Azure Monitor Agent (AMA) and Data Collection Rules (DCR), ingesting logs into a Log Analytics Workspace, developing analytics rules, simulating real-world attacks, investigating alerts and incidents, and performing threat hunting. Strong understanding of the MITRE ATT&CK framework, Cyber Kill Chain, and SOC investigation workflows.

Cybersecurity Analyst - LTM - Pune

(2024-04)

MSTIC Response

• Performed analysis of emails, URLs, domains, attachments, and redirect chains using Sonar, an internal machine learning detection engine supporting Microsoft Defender for Office 365, to support email threat investigations and machine learning review workflows.
• Investigated high-impact ICM (Incident & Case Management) alerts generated when detection thresholds were exceeded, leveraging the AWB investigation portal and Kusto Query Language (KQL) to analyze affected entities, retrieve email samples, identify triggering detection signatures, and perform root cause analysis.
• Investigated customer escalations by validating blocked emails, URLs, and attachments as True Positives (TP) or False Positives (FP), assessing customer impact, and recommending appropriate remediation actions.
• Collaborated with Detection Engineering teams by creating Detection Tickets for high-impact false positives, facilitating signature tuning to improve detection accuracy and minimize customer impact.
• Reviewed low-confidence Sonar detections and performed security classification of emails, URLs, PDFs, HTML, and SVG attachments as Benign, Phishing, Spam, Scam, or Malicious, providing analyst feedback to improve future machine learning detection decisions.
• Performed IOC validation using VirusTotal, URLScan, WHOIS, and sandbox environments to investigate suspicious URLs, domains, file hashes, and email artifacts.

Java Developer - LTM - Pune

(2024-01 - 2024-03)

ABSA Bank Limited

• Built and maintained backend features for a banking web application using Java and Spring Boot, including database integration and dynamic data retrieval for UI components.
• Developed and consumed REST APIs to support core banking workflows, ensuring reliable data exchange between backend services and the front-end.
• Collaborated with the development team to understand application workflows and banking-domain requirements, contributing to enhancements and defect fixes.

Trainee - LTM - Chennai

(2023-09 - 2023-12)

• Completed hands-on DevOps training in AWS, Git, Jenkins, and Docker as part of a structured learning program.
• Built an end-to-end CI/CD pipeline integrating Git, Jenkins, Docker, and AWS to automate code integration, build, and deployment workflows.
• Gained working knowledge of containerization and cloud-based deployment, reinforcing automation and infrastructure fundamentals.

Bachelor of Technology - Computer Science & Engineering - GIET College (2018-06 - 2022-06) Andhra Pradesh, India

Senior Secondary - Sri Chaitanya Junior College (2018-03) Andhra Pradesh

Secondary - Ravindra Bharathi School (2016-03) Andhra Pradesh