Open to opportunities

Amitha Mallur

@amithamallur

Message

Incident Response and DFIR analyst strengthening defenses through investigations and threat hunting.

India

Message

What I'm looking for

I’m looking for an Incident Response/DFIR role where I can lead investigations, perform root-cause analysis, and run proactive threat hunting—partnering with stakeholders and improving detection via SIEM/EDR to strengthen organizational defenses.

I’m a cybersecurity professional with 7+ years of experience in Incident Response, Digital Forensics, and Security Operations. I investigate and respond to threats, performing incident response investigations, containment, and root cause analysis across diverse platforms while gathering and analyzing forensic evidence from static and live devices.

At Sophos, I support an Emergency Incident response team, counteracting active threats and intrusions to safeguard customer environments across the USA, UK, APAC, and Middle East. I also lead customer communications, deliver clear written and verbal reports, and proactively hunt for emerging risks—while mentoring fellow analysts and continuously enhancing incident response techniques and security measures.

Experience

Work history, roles, and key accomplishments

Incident Response Analyst 2

Sophos

Sep 2021 - Mar 2026 (4 years 6 months)

Served on the emergency incident response team, conducting incident investigations, containment, and root-cause analysis across endpoint and network evidence for clients in the USA, UK, APAC, and the Middle East. Performed threat hunting, analyzed forensic evidence, and delivered findings and recommendations to senior stakeholders.

Incident Response Digital Forensics Threat Hunting Root Cause Analysis Endpoint Security Network Security Malware Analysis EDR SIEM

Information Security Analyst

Fossil Group

Dec 2018 - Sep 2021 (2 years 9 months)

Monitored SIEM/EDR/IDS-IPS to detect and respond to security incidents, investigating logs, containing malicious activity, and performing basic static and dynamic malware analysis. Built SIEM correlation rules and dashboards, managed phishing investigations, and supported threat hunting using threat intelligence feeds while documenting cases in ticketing systems.