Open to opportunities

Vineeth Thota

@vineeththota

Message

I am a cybersecurity-focused software engineer with full-stack and cloud expertise.

United States

Message

What I'm looking for

I'm seeking a hybrid role combining software development and cybersecurity in cloud-native environments, focusing on detection engineering, incident response, automation, and DevSecOps within a collaborative, growth-oriented team.

I have about 5-6 years of experience in software development and cybersecurity, delivering cloud-native microservices, single-page applications, and SOC operations across enterprise environments.

At RE IT Services I analyzed over 1,000 security alerts using the Cortex SOAR platform, triaging over 70% within 60 minutes and creating 50+ tuning requests that substantially lowered queue volumes while mentoring junior analysts and participating in hiring panels.

In software roles at Amazon and FactSet I implemented infrastructure as code with CloudFormation and CDK, migrated CDK v1 to v2, improved deployment efficiency by 40%, and reduced customer-side tickets by 30% through cross-functional collaboration and CI/CD improvements.

I combine hands-on incident response, threat intelligence, SAST/DAST/SCA (Veracode, Rapid7), and automation to reduce time-to-detect and time-to-remediate. I prioritize proactive tuning, scalable playbooks, and building tools and dashboards that drive measurable SOC and product security improvements.

Experience

Work history, roles, and key accomplishments

Information Security Analyst

CVS

Jun 2024 - Jul 2025 (1 year 1 month)

Analyzed over 1,000 security alerts via Cortex SOAR and triaged 70% within 60 minutes, reducing queue volume through 50+ tuning requests and automated playbooks.

Threat Intelligence Incident Response Veracode Rapid7)SIEM Malware Analysis

Security Engineer

Cytiva

Jun 2024 - Jul 2025 (1 year 1 month)

Conducted risk assessments for health‑tech products against ISO 27001, NIST 800-53 and IEC 62443, integrated CTI into SIEM/EDR, and added SBOMs to GRC to improve compliance tracking.

GRC NIST 800 53 ISO 27001 SBOMs SIEM EDR Threat Intelligence Veracode

Security Analyst

ADP

Apr 2023 - Apr 2024 (1 year)

Monitored SIEM logs in Splunk and conducted real-time incident response, improving endpoint protection and detection by tuning rules and automations while supporting on-call rotations.

Splunk Rapid7)SonarQube SAST DAST Incident Response Automation)Threat Intelligence

Software Engineer

Amazon

Jul 2022 - Feb 2023 (7 months)

Developed features and infrastructure for GameLift using Java and AWS, migrated CDK v1 to v2 and improved deployment efficiency by 40%, reducing customer‑side tickets by 30%.

Java JavaScript AWS CDK CloudFormation IAM Lambda CI CD GraphQL

Security Analyst

University of North Carolina at Charlotte

Aug 2021 - May 2022 (9 months)

Investigated incidents using Splunk and EDR (CrowdStrike), performed forensic analysis with FTK and Autopsy, and automated SOC tasks to reduce response times.

Splunk Crowdstrike Forensics Autopsy XSOAR Malware Analysis

Software Engineer

FactSet Research Systems

May 2018 - Dec 2020 (2 years 7 months)

Designed and developed Angular single‑page applications and CI/CD pipelines with Jenkins and Kubernetes, improving automated test coverage by 40% and reducing load times by 30%.