Shourya Sai Macha

Computer Information Systems

University of Houston

Security analysis

Python and SQL

IT support and access management

Projects and experience

Welcome█

SHOURYA SAI MACHA ✦ COMPTIA SECURITY+ ✦ COMPTIA NETWORK+ ✦ CIS STUDENT ✦ SECURITY ANALYSIS ✦ IT SUPPORT ✦ HOUSTON, TEXAS ✦ PYTHON AUTOMATION ✦ UNIVERSITY OF HOUSTON ✦ DECEMBER 2026 ✦ SHOURYA SAI MACHA ✦ COMPTIA SECURITY+ ✦ COMPTIA NETWORK+ ✦ CIS STUDENT ✦ SECURITY ANALYSIS ✦ IT SUPPORT ✦ HOUSTON, TEXAS ✦ PYTHON AUTOMATION ✦ UNIVERSITY OF HOUSTON ✦ DECEMBER 2026 ✦ SHOURYA SAI MACHA ✦ COMPTIA SECURITY+ ✦ COMPTIA NETWORK+ ✦ CIS STUDENT ✦ SECURITY ANALYSIS ✦ IT SUPPORT ✦ HOUSTON, TEXAS ✦ PYTHON AUTOMATION ✦ UNIVERSITY OF HOUSTON ✦ DECEMBER 2026 ✦ SHOURYA SAI MACHA ✦ COMPTIA SECURITY+ ✦ COMPTIA NETWORK+ ✦ CIS STUDENT ✦ SECURITY ANALYSIS ✦ IT SUPPORT ✦ HOUSTON, TEXAS ✦ PYTHON AUTOMATION ✦ UNIVERSITY OF HOUSTON ✦ DECEMBER 2026
EMAIL ANALYSIS ✦ MITRE ATT&CK ✦ AUDIT LOGGING ✦ VULNERABILITY ASSESSMENT ✦ ACCESS MANAGEMENT ✦ AWS IAM ✦ PYTHON / FASTAPI ✦ DOCKER ✦ SQL ✦ PROJECTS ON GITHUB ✦ EMAIL ANALYSIS ✦ MITRE ATT&CK ✦ AUDIT LOGGING ✦ VULNERABILITY ASSESSMENT ✦ ACCESS MANAGEMENT ✦ AWS IAM ✦ PYTHON / FASTAPI ✦ DOCKER ✦ SQL ✦ PROJECTS ON GITHUB ✦ EMAIL ANALYSIS ✦ MITRE ATT&CK ✦ AUDIT LOGGING ✦ VULNERABILITY ASSESSMENT ✦ ACCESS MANAGEMENT ✦ AWS IAM ✦ PYTHON / FASTAPI ✦ DOCKER ✦ SQL ✦ PROJECTS ON GITHUB ✦ EMAIL ANALYSIS ✦ MITRE ATT&CK ✦ AUDIT LOGGING ✦ VULNERABILITY ASSESSMENT ✦ ACCESS MANAGEMENT ✦ AWS IAM ✦ PYTHON / FASTAPI ✦ DOCKER ✦ SQL ✦ PROJECTS ON GITHUB

Security operations & automation

SHOURYA SAI MACHA

CIS student · University of Houston

I’m a Computer Information Systems student at the University of Houston. My work focuses on security analysis, access management, and Python tools that simplify investigation tasks. I currently work as a Student IT Assistant at UH’s MD Anderson Library.

LocationHouston, Texas
EducationUniversity of Houston, B.S. CIS
LearningAWS Cloud Practitioner
Skills

What I work with

Tools and areas I’ve worked with through projects, coursework, and IT support

Explore the chart to see my self-assessed skill levels.

Skills overviewSelf-assessed
02468SOC/IRCTIGRCVuln MgmtSIEMNet/EPIAMCloudDev

These are self-assessed levels, not formal qualifications.

01 · Security operations & incident response

Security MonitoringAlert TriageIOC ExtractionNIST 800 61Incident ClassificationEvidence HandlingContainment & RemediationEscalation WorkflowsDigital ForensicsRoot Cause Analysis

02 · Threat intelligence

TTP ProfilingAdversary Campaign AnalysisCTI LifecycleKill Chain MappingMITRE ATT&CKMITRE ATT&CK for ICSIndicator EnrichmentStatic Artifact AnalysisBehavioral DetectionMalware Triage

03 · Risk & compliance

RMFNIST SP 800 37NIST SP 800 53SSP DevelopmentATO ProcessPOA&M TrackingISCMHIPAAFISMAFedRAMPCMMCSOC 2PCI DSSGDPRSOXGLBAISO 27001NIST CSFOWASP Top 10

04 · Vulnerability management

OpenVASNessus / TenableCVSS ScoringNIST SP 800 115Patch ValidationOT/ICS Attack SurfacePenetration TestingThreat ModelingBaseline Hardening

05 · SIEM & detection

Splunk (SPL)Elastic / KQLMicrosoft SentinelELK StackWazuhSigma Rule AuthoringCorrelation Rule LifecycleAlert TuningMITRE Navigator

06 · Network & endpoint security

Firewall Log ReviewNetwork SegmentationNmapWiresharkpfSenseIDS/IPSEndpoint HardeningBurp SuiteMetasploit

07 · Identity & access management

Identity ProvisioningLifecycle ManagementRBACLeast PrivilegeUser Access ReviewsAuthentication WorkflowsCIA Triad

08 · Cloud & infrastructure

AWS IAMAWS EC2AWS RDSCloudTrailAzure SentinelAzure DefenderDockerKubernetesTerraformLinux AdminDevSecOps

09 · Development & automation

PythonFastAPIFlaskBashPowerShellSQL (MySQL, PostgreSQL, SQLite)JavaScriptNode.jsREST APIsGit
Projects

Selected work

Projects in security analysis, automation, and application development

01

MITRE ATT&CK Mapper

A Python tool that connects security events and indicators to MITRE ATT&CK techniques. It parses input records, matches patterns, and presents the results in a Streamlit dashboard. Exports include Navigator layers, visual reports, and Sigma rules for further detection work.

PythonFastAPIStreamlitPlotlyDocker
ATT&CK MAPPINGSIGMA EXPORTS
Project 01 overview
MITRE ATT&CK Mapper — workflow
> Read logs and incident records
Match events to ATT&CK techniques
> Review mappings and export findings
Generate Sigma rules for further testing
Export an ATT&CK Navigator layer
Explore results in the dashboard
> █
02

IoT and OT Vulnerability Assessment

A vulnerability assessment workflow for reviewing exposed services, known vulnerabilities, and configuration issues. Findings are prioritized using CVSS and mapped to MITRE ATT&CK for ICS, with a Next.js dashboard for reviewing remediation priorities.

PythonFastAPINext.jsOpenVASGPT 4o
VULNERABILITY REVIEWREMEDIATION PRIORITIES
[ BUILT ]
Project 02 overview
IoT and OT Assessment — workflow
> Assess exposed services and configurations
Review authenticated and unauthenticated scans
Identify vulnerabilities and open ports
> Prioritize findings for remediation
Apply CVSS scores and ATT&CK for ICS mappings
Review recommendations in the dashboard
> █
03

Email Phishing Analysis

A Python tool for reviewing suspicious email files. It extracts URLs, reads SPF, DKIM, and DMARC results from authentication headers, and checks URLs through the VirusTotal API. The findings are collected in a Markdown report for review.

PythonVirusTotal API
HEADER ANALYSISURL CHECKS
Project 03 overview
Email Phishing Analysis — workflow
> Read an .eml file
Parse the headers and message body
Extract links from the email content
Read SPF, DKIM, and DMARC header results
Check URL reputation with VirusTotal
Collect findings in a Markdown report
> █
04

Secure Audit Logging

An audit logging system that links activity records using SHA-256 hashes. Python monitors send events to a Flask backend, which stores the record chain in SQLite. Verification and reporting tools support integrity checks and review of the collected activity.

PythonFlaskSQLite
HASH CHAININGINTEGRITY CHECKS
Project 04 overview
Secure Audit Logging — workflow
> Collect activity events
Send records to the Flask logging API
Link each record with SHA-256 hashes
> Verify the record chain
Review the history stored in SQLite
Export CSV or HTML summaries
> █
05

COMP — Healthcare Documentation

An AI-assisted prototype developed during a healthcare compliance challenge, where it received an honorable mention. It explores how patient history can help identify documentation gaps and support drafts of insurance submission and appeal letters.

Base44AI
DOCUMENTATION PROTOTYPE
[ HONORABLE MENTION ]
Project 05 overview
COMP — prototype workflow
> Review documentation against patient history
Explore a pre-submission review workflow
Identify potential documentation gaps
Draft submission and appeal letters
Keep human review in the process
> █
06

Facility Room Management

A room management application with role-based access and a MySQL database hosted on AWS RDS. My work covered access permissions, database workflows, and API development, including parameterized queries and input validation.

PythonFlaskNode.jsMySQLAWS RDS
ROLE-BASED ACCESSDATABASE WORKFLOWS
Project 06 overview
Facility Room Management — workflow
> Define user roles and permissions
Apply role-based access controls
Configure database access on AWS
> Read and update room records through the API
Store records in MySQL on AWS RDS
Use parameterized queries and input validation
> █
Experience

Current role

IT support at the University of Houston

MD Anderson Library · University of Houston

Student IT Assistant

February 2024–Present

01 · Technical and security support

I investigate technical and security issues across library systems, document findings, and escalate issues when needed.

[ ISSUE TRIAGE ][ DOCUMENTATION ][ ESCALATION ]

02 · Documentation and onboarding

I write and maintain incident response guidance, access procedures, and onboarding documentation to support the team’s day-to-day work.

[ RESPONSE GUIDANCE ][ ACCESS PROCEDURES ][ ONBOARDING ]

03 · Account and access management

I support account provisioning and access reviews for research platforms, including JSTOR, ProQuest, and EBSCOhost.

[ ACCOUNT PROVISIONING ][ ACCESS REVIEWS ][ RESEARCH PLATFORMS ]

04 · Remediation support

I support network and endpoint remediation, document the work, and track issues through resolution.

[ NETWORK SUPPORT ][ ENDPOINTS ][ ISSUE TRACKING ]
Education

Education & certifications

Academic background and professional certifications

Degree

University of Houston · B.S. Computer Information Systems

Expected December 2026

Relevant coursework

Network SecuritySystems Analysis and DesignDatabase ManagementNIST CSF and SP 800 53PCI DSSSOXGLBAOrganizational Leadership

01

CompTIA

Security+

SY0-701

Earned 2025

02

CompTIA

Network+

N10-009

Earned 2025

03

Amazon Web Services

AWS Cloud Practitioner

CLF-C02

Currently studying · 2026

Study progress

Contact

Get in touch

Have a question about a project or an opportunity to discuss? Send me an email.

Prepare a draft in your email app

Shourya Sai Macha · University of Houston · December 2026