Kavya Srinivas Murthy

* Worked on vulnerability management in Qualys and endpoint security (Microsoft Defender), improving detection, remediation workflows, and compliance readiness. * Contributed to security monitoring and incident response as part of BAU processes, strengthening overall cyber resilience. * Automated threat hunting in Microsoft Defender using custom KQL queries for hashes, IPs, and domains, enhancing detection and reusability across departments. * Conducted threat hunting with Microsoft Defender & Azure Sentinel, validating IoCs and investigating incidents. * Automated IOC validation with Python/PowerShell + VirusTotal API, reducing manual workload by 40%. * Contributed to BitSight risk assessments, supporting accurate reporting to stakeholders.

* Led the implementation of containerization and immutable infrastructure using Docker and Kubernetes. Managed and monitored Kubernetes clusters, ensuring high availability and security of containerized applications. * Developed secure CI/CD pipelines with Jenkins, incorporating role-based access control and creating detailed monitoring dashboards in Grafana using Prometheus metrics. * Conducted extensive web application penetration testing for a mock e-commerce platform, identifying critical vulnerabilities such as SQL injection, XSS, and CSRF. Utilized tools like Burp Suite, Nikto, Nmap, Wappalyzer, and Dirbuster to discover and exploit vulnerabilities, and provided comprehensive remediation strategies. * Performed thorough network security assessments in a simulated corporate environment. Used Netcat, Virtual Machine, Nmap, Wireshark, and Metasploit to map network topology, identify open ports, and scan for vulnerabilities, reinforcing the importance of securing network endpoints. Created and managed YAML files and Helm charts for Kubernetes, ensuring secure deployment practices and container orchestration. * In managing containerization and immutable infrastructure using docker/Kubernetes. * Controlling and Managing Pods, Deployments, Services, Routes and other components. Also performing cluster updates. * User Management and Roles in Jenkins. * Creating CICD dashboards in Grafana using the metrics from Prometheus. * Good knowledge on Ansible play books. Source Code Management using GitHub. *Kubernetes Nodes — Setup with Monitoring using Prometheus and Grafana. * Active input and part of the Knowledge Management Process. * Container Orchestration using Kubernetes, creation of containers using docker. * Creating Pod's and Deployment and exposing them as a Service using Kubernetes. * Create Docker Images using Docker File and pushing them into the repository/hub. * Incident Management and change Management.

* Managed HCL Domino Servers and application databases, ensuring secure deployment and maintenance of applications. Implemented security patches and monitored for potential threats. * Acted as the focal point for critical cybersecurity incidents, coordinating with the North America region team to ensure timely resolution and communication. * Conducted a social engineering simulation focusing on SMS spoofing to assess and improve organizational awareness. Designed realistic phishing messages to identify security awareness gaps and recommended targeted training programs. * Led a project on password security, evaluating organizational password policies. Employed tools like John the Ripper, Hydra, and Hashcat to perform brute force and dictionary attacks on password hashes, highlighting the need for strong password policies and multi-factor authentication.