⌁
Security operations
Alert triage, threat hunting, event correlation, and detection tuning across SIEM and EDR platforms.
- Splunk & SPL
- Sentinel & KQL
- Detection engineering
Kansas City, Missouri · Open to opportunities
Security thinking.
Operational impact.
I’m Purna, a Cybersecurity Engineer with nearly four years of progressive experience protecting endpoints, identities, networks, and cloud environments.
4Years in cybersecurity
3Progressive security roles
6Industry credentials
Currently focused onDetection, response & resilient systems
Personal introduction
Meet the person behind the work.
A brief introduction to my cybersecurity background, the way I approach security challenges, and the value I bring to a team.
Splunk
Microsoft Sentinel
CrowdStrike
AWS Security
Microsoft Defender
Core expertise
Turning security signals into decisive action.
From first alert to root cause, I connect technical evidence with practical remediation.
◎
Incident response
Structured investigation and containment of phishing, malware, identity, endpoint, and network threats.
- IOC analysis
- Root cause analysis
- Response playbooks
◇
Cloud & identity
Hardening AWS and Microsoft identity environments through visibility, least privilege, and control validation.
- AWS Security Hub
- IAM & Entra ID
- CloudTrail & GuardDuty
⬡
Vulnerability & endpoint
Risk-based vulnerability prioritization, patch validation, configuration review, and endpoint defense.
- CrowdStrike Falcon
- Microsoft Defender
- CIS hardening
Selected projects
Security work grounded in real outcomes.
A featured academic leadership project followed by representative employment case studies. Professional details are intentionally sanitized to protect employer and client information.
Team Leader · Cybersecurity Awareness Program
Turning awareness into measurable behavior change.
Led a five-person team in developing and delivering a semester-long cybersecurity awareness campaign for students and faculty in the CIS Department. The program addressed phishing, social engineering, and other common cyber threats through clear, audience-focused education.
48%decrease in participants clicking simulated phishing links after the campaign
Leadership
Directed a five-person peer team and coordinated responsibilities throughout planning and delivery.
Stakeholder alignment
Led weekly client and internal-team meetings to track progress, resolve issues, and maintain alignment.
Communication
Translated security concepts into practical guidance for students and faculty with different technical backgrounds.
Security AwarenessProject ManagementPublic SpeakingMicrosoft Office
Enterprise Data Loss Prevention implementation
Implemented targeted data-loss prevention controls to reduce the risk of sensitive information leaving the financial-services environment through removable media, cloud storage, personal email, and other transfer channels.
Policy design
Configured Symantec endpoint controls for USB devices, cloud-drive access, personal email domains, and sensitive-data transfer scenarios.
Risk-based monitoring
Applied focused monitoring to high-risk users with repeated security events and inspected common business-document formats including PPT, DOC, and XLS files.
Preventive controls
Used content indicators and keywords such as “confidential” to identify risky transfers and help prevent data exfiltration.
Data Loss PreventionSymantec Endpoint ProtectionInsider Threat ReductionRisk Mitigation
Symantec Advanced Threat Protection deployment
Deployed and managed the organization’s first enterprise Symantec ATP solution, combining malware analysis, secure web controls, threat intelligence, and policy-based response.
What I delivered
Sandbox detonation and IOC analysis, Secure Web Gateway filtering, URL allow/deny policies, hash reputation checks using VirusTotal and Cisco Talos, and ongoing alert investigation and reporting.
Malware AnalysisEndpoint SecurityThreat IntelligenceIncident Response
IT & Security Compliance Handbook
Created a foundational technology-governance handbook and a structured data-classification model to strengthen protection of company and customer information.
What I delivered
Practical compliance policies, secure-technology standards, data-handling guidance, and weekly onboarding sessions that helped employees understand and apply security expectations.
Security ComplianceIT Risk ManagementData ClassificationSecurity Awareness
Endpoint and identity incident response
Investigated escalated endpoint, account, authentication, application, and connectivity incidents across enterprise environments.
Approach
Correlated Microsoft Defender and CrowdStrike telemetry with Active Directory, Microsoft Entra ID, VPN, DNS, and user-access evidence to establish scope and root cause.
Contribution
Coordinated remediation across Service Desk, Infrastructure, Networking, IAM, Cloud, Application, and Security teams, then documented findings and repeatable procedures.
Operational value
Supported secure restoration of business services and improved consistency for recurring incident investigation and resolution.
CrowdStrike FalconMicrosoft DefenderEntra IDPowerShellPython
Enterprise threat investigation and containment
Investigated escalated malware, phishing, suspicious authentication, unauthorized-access, endpoint, and network incidents for a financial-services environment.
What I delivered
Evidence-based severity decisions, attack-scope analysis, IOCs, investigation timelines, containment guidance, and remediation recommendations.
SplunkSentinelKQLSPL
Detection tuning and response readiness
Used recurring alert patterns and investigation findings to refine monitoring logic and make escalations more actionable for downstream analysts.
What I delivered
Updated detection logic, incident-response playbooks, technical runbooks, escalation evidence, and standardized investigation documentation.
SIEMEDRPlaybooksThreat hunting
Windows, identity, and endpoint hardening
Strengthened day-to-day infrastructure security while administering Windows Server, Active Directory, Microsoft 365, enterprise endpoints, and network services.
Approach
Applied operating-system and application patches, endpoint security configurations, password policies, access permissions, and system-hardening controls.
Validation
Monitored Defender, Windows Security Events, endpoint health, and authentication activity, then verified remediation and configuration changes.
Operational value
Supported reliable access, reduced exposure to known vulnerabilities, and maintained clear technical and security procedures for support teams.
Windows ServerActive DirectoryMicrosoft 365DefenderGroup Policy
Experience
Progress through practice.
APR 2025 — JUL 2026
Juniper Networks · Remote, US
Cybersecurity Engineer
Investigated escalated endpoint, identity, application, and network incidents; analyzed Defender and CrowdStrike telemetry; validated patches and security changes; and automated recurring analysis and reporting with PowerShell and Python.
MAR 2023 — DEC 2023
Pasonet Technologies · Morgan Stanley
SOC Analyst L2
Led escalated investigations across endpoint, identity, firewall, VPN, and DNS telemetry; coordinated containment and remediation; improved detection logic; and produced clear incident timelines and root-cause findings.
JUL 2022 — MAR 2023
Pasonet Technologies · Morgan Stanley
SOC Analyst L1
Monitored and triaged enterprise alerts, investigated phishing and endpoint activity, correlated cross-platform telemetry, and escalated validated threats with evidence and actionable context.
NOV 2019 — DEC 2020
EMTECH Solutions · IISc Bangalore
IT Systems Administrator
Administered Windows, Active Directory, Microsoft 365, DNS, DHCP, VPN, and endpoints while applying patches, hardening controls, and troubleshooting infrastructure and access issues.
Credentials
Built on a strong technical foundation.
Industry certifications and focused continuing education across security, networking, endpoint support, cloud, and emerging technology.
View LinkedIn profile ↗02
Cisco Certified Network AssociateCCNA · Issued Oct 2025 · Valid through Oct 2028
View certificate ↗04
Palo Alto Networks CybersecurityProfessional Certificate · Four-course program · May 2026
View certificate ↗06
AWS Cloud Practitioner EssentialsAWS Training & Certification · Completed May 2026
View certificate ↗Education
Academic foundation.
Graduate cybersecurity education supported by a technical foundation in electronics, communications, and networking.
Master of Science
Cyber Security and Information Assurance
University of Central Missouri
Focused on enterprise security operations, threat detection, risk management, incident response, vulnerability assessment, digital forensics, SIEM analysis, and secure system architecture.
View degree ↗Bachelor of Technology
Electronics and Communication Engineering
JNTUK · KKR & KSR Institute of Technology and Sciences
Built a strong foundation in electronics, communication systems, networking, TCP/IP analysis, security monitoring, teamwork, and technical leadership.
Diploma
Electronics and Communication Engineering
State Board of Technical Education and Training, Andhra Pradesh
Developed practical knowledge of computer networking, IoT, embedded systems, electronics, troubleshooting, and PCB design through labs and technical activities.
Early technical & team achievements
Learning through competition and practice.
Experiences during my diploma program that strengthened teamwork, discipline, electrical safety, and hands-on problem solving.
State-level inter-polytechnic winners
Represented Guntur District as part of the winning team at the 24th State Level Inter Polytechnic Sports & Games Meet, held at Bapatla Engineering College. The experience strengthened teamwork, discipline, performance under pressure, and commitment to a shared goal.
Electrical & electronics technology challenge
Worked with a team during an intensive 24-hour hands-on workshop and earned recognition for the team’s best performance. The practical work involved interpreting basic wiring layouts, assembling and checking switching and lighting circuits, following electrical-safety procedures, verifying connections, and troubleshooting faults through systematic testing.
Leadership & community
Contributing beyond the role.
Applying organization, communication, and technology skills to support local communities and student innovation.
Volunteer Administrative Assistant
Greater Kansas City / Northwest Missouri
Support regional operations through accurate data maintenance, communication coordination, activity documentation, scheduling, and day-to-day administrative assistance for volunteer and leadership teams.
Recent participation has included supporting community preparedness and field-coordination activities where Red Cross personnel worked alongside local partners. These experiences strengthened my understanding of organized response operations, clear information flow, resource readiness, and collaboration across different teams.
I bring a security-minded approach to administrative work by handling information carefully, maintaining dependable records, following established procedures, and helping teams stay organized during time-sensitive community activities.
Resource & Marketing Coordinator
Entrepreneurship Cell · Bachelor’s leadership experience
Helped build an active campus environment for entrepreneurship, innovation, and student-led problem solving. Coordinated people, materials, promotion, vendors, and institutional support for workshops, innovation challenges, and idea-pitching activities.
Supported Shark Tank-style sessions where students shaped ideas, discussed market needs, prepared value propositions, and presented solutions for feedback. Co-organized the E-Market event, combining poster creation and business pitching to encourage creative thinking, teamwork, customer awareness, and practical communication.
Led digital and on-campus outreach that increased event attendance by 90%, while helping participants move from an initial idea toward a clearer solution, presentation, and potential business concept.
Let’s work together
Ready to strengthen your security posture?
I’m open to cybersecurity engineering, SOC, incident response, and security operations opportunities.