Cybersecurity Analyst · Vulnerability Research · Threat Intelligence · Detection Engineering · Security Automation

Hyderabad, India · LinkedIn · alisha.cybersec@gmail.com

Python Splunk / SPL MITRE ATT&CK NIST CSF OWASP Top 10 Kali Ubuntu

I build practical cybersecurity tools and investigate vulnerabilities through controlled experimentation, security telemetry analysis, and vulnerability intelligence.

My work spans vulnerability assessment, CVE research, threat intelligence, detection engineering, phishing/BEC investigation, and security automation. I focus on making findings reproducible, evidence-based, and useful for defensive decisions.

Python EML Analysis SPF/DKIM/DMARC MITRE ATT&CK

A Python investigation platform for phishing and BEC email analysis. It extracts evidence from email structure, authentication results, URLs, domains, IPs, and other indicators, then applies a deterministic risk engine for verdict, severity, confidence, and ATT&CK mapping. AI is used only as an explanation layer and does not make or override the security decision.

Kali Windows Sysmon Splunk SPL MITRE ATT&CK

Built a two-system Windows/Kali lab to simulate reconnaissance, SMB enumeration/authentication attempts, PowerShell execution, and scheduled-task persistence. Investigated Sysmon telemetry in Splunk, built 10+ SPL detections, worked with raw Sysmon XML when field extraction was insufficient, and identified a Windows Firewall telemetry forwarding gap.

Python NVD API nmap theHarvester testssl.sh GitHub Actions

A modular vulnerability assessment platform combining parallel reconnaissance, CVE intelligence, cross-tool correlation, weighted risk scoring, and PDF/HTML/JSON reporting.

Its security-validation pipeline adds Software Composition Analysis with pip-audit, then enriches findings with CVSS, EPSS, and CISA KEV intelligence before applying a deterministic security gate with explicit CRITICAL/HIGH/KEV and enrichment-failure policies.

Python OpenSSH Welch's t-test Cohen's d

Re-tested the OpenSSH username-enumeration timing side-channel on a modern default-hardened Ubuntu Server. Applied statistical testing to authentication-timing data and documented the absence of a useful practical signal under the tested conditions.

CVSS MITRE ATT&CK IOCs

Technical vulnerability research covering CVSS assessment, ATT&CK mapping, exploitation context, indicators of compromise, detection opportunities, and defensive recommendations.

Co-author, Artificial Intelligence in Aging Research: Advanced Models for Detecting and Targeting Cellular Senescence — Madhya Bharti Journal (UGC CARE Group I), 2025.

Google Cybersecurity Professional Certificate · 2026

Vulnerability Research · Threat Intelligence · SOC Detection · Security Automation · CVE Analysis · Security Engineering

Open to conversations and opportunities in cybersecurity analysis, threat intelligence, vulnerability management, security operations, and detection engineering.