Looking for a job

Venkateshh Thota

@venkateshhthota

Detection Engineer at NCR Atleos who validates up to 20 Splunk detections daily and automates threat response.

At NCR Atleos, I progressed from alert triage into detection engineering, validating up to 20 Splunk SPL/ESCU detections daily and aligning them with MITRE ATT&CK.

I designed Risk-Based Alerting rules in Splunk ES to prioritize high-risk entities across a 5,000+ endpoint estate, and authored the SOC's first detection-review SLA.

I investigate phishing, credential-leak, malware and C2 cases across CrowdStrike Falcon, Proofpoint and ExtraHop NDR. I also run hypothesis-driven SPL hunts to find threats that standing detections missed.

I automated alert enrichment and IOC blocking in Torq SOAR, and wrote the incident-response playbooks, runbooks and SOPs used in daily SOC operations.

Experience

Work history, roles, and key accomplishments

Current

Information Security Engineer – SOC

Current

NCR Atleos

Sep 2024 - Present (2 years 1 month)

Validated up to 20 Splunk SPL/ESCU detections daily, designed Risk-Based Alerting in Splunk ES, and led end-to-end investigations across CrowdStrike Falcon, Proofpoint, and ExtraHop NDR. Automated enrichment and IOC blocking in Torq SOAR and authored IR playbooks and SOPs.

Splunk Enterprise Security SPL ESCU Splunk Risk Based Alerting MITRE ATT&CK CrowdStrike Falcon Cloud Security ProofPoint Extrahop Torq PowerShell Incident Response Threat Hunting

Information Security Analyst

NCR Atleos

Mar 2024 - Aug 2024 (5 months)

Triaged and escalated phishing, suspicious-login, malware, and credential-exposure alerts in Splunk and CrowdStrike Falcon. Built a daily PowerShell port scanner and Splunk dashboards for executive reporting, and automated investigation steps in Torq SOAR.

Splunk CrowdStrike Falcon Cloud Security PowerShell Torq Incident Response Alert Triage Dashboarding