Deexith Uppala

Cybersecurity analyst with 5+ years in incident response, threat intelligence, and security operations across large enterprise environments. Investigates and contains email, endpoint, identity, cloud, and network threats using Microsoft Sentinel, Splunk, Microsoft Defender XDR, and CrowdStrike Falcon, and analyzes attacks with MITRE ATT&CK, the Cyber Kill Chain, and the Diamond Model. Also handles AI-enabled phishing and helps secure the use of generative AI tools.

Writes KQL, SPL, Python, and PowerShell for threat hunting and automation, and built an AI-assisted triage workflow that drafts case summaries for analyst review. Holds AZ-500, Security+, CEH, and CyberOps Associate.

Cyber Security Analyst (Security Operations & Compliance) at Walmart, USA (2025-01 – Present)

• Triage and investigate 150+ security alerts and requests a day across Microsoft Sentinel, Splunk, and Defender XDR, covering email, endpoint, identity, and cloud activity, and escalate confirmed incidents with a clear timeline and impact, including after-hours response.
• Investigate user-reported phishing, including AI-generated phishing and social engineering, and malware cases, analyze attacker behavior with MITRE ATT&CK, the Cyber Kill Chain, and the Diamond Model, and guide affected teams through containment and recovery.
• Help secure the use of generative AI tools and agents, reviewing usage for prompt injection, data leakage, and unauthorized access risks.
• Partner with the customer security team on fraud investigations, pulling log and account evidence to confirm what happened.
• Hunt for threats in KQL and SPL using current threat intelligence and TTPs, and tune detection rules and thresholds to cut false positives.
• Build automated response playbooks in Sentinel and Defender for recurring alert types, reducing the manual steps analysts repeat on common cases.
• Work with network and infrastructure teams on firewall, VPN, IDS/IPS, SASE, and secure web proxy configuration, and take part in red team and blue team exercises to test detection and response.
• Write incident reports and post-incident summaries, keep playbooks and metrics current, and review access across 500+ accounts to enforce least privilege and Zero Trust policy.

Senior Cyber Security Developer (Security Engineering & Operations) at NTT Data, India (2021-09 – 2023-07)

• Led incident response and root cause analysis for 20+ production incidents on Windows and Linux servers, cutting average recovery time by ~25%.
• Monitored and investigated alerts in IBM QRadar and LogRhythm, and managed vulnerability scanning in Rapid7, prioritizing fixes by risk.
• Automated security checks across 25+ delivery pipelines with Python and PowerShell, reducing release-related security issues by ~30%.
• Administered Active Directory, firewall rules, and VPN access, and configured DLP policies in Microsoft Purview to protect sensitive data.
• Built Power BI dashboards tracking 100+ security and platform metrics, and wrote the security policies, procedures, and runbooks the team followed.

Cyber Security Analyst at Maxgen Technologies, India (2020-04 – 2021-08)

• Supported investigations for 10–15 security incidents through malware analysis, log review, IOC checks, and CVE research, and summarized findings with recommended next steps.
• Ran 50+ vulnerability assessments with Tenable Nessus and OpenVAS, and prioritized remediation by CVSS score and business impact.
• Performed 30+ network and web application security tests against OWASP Top 10, and documented findings and remediation guidance for client teams.
• Tracked each fix to closure in ServiceNow and retested to confirm the issue was resolved.

Master of Science in Cyber Security – Illinois Institute of Technology, Chicago, IL (2023-08 – 2025-05)

Bachelor of Technology in Computer Science – Lovely Professional University, Punjab, India (2018-08 – 2022-05)