Nihal Reddy Palle
Cyber Security Analyst
Hyderabad,TG
Summary
Results-driven Cyber Security Analyst with 6+ years of experience in automation, Microsoft cloud security, and SIEM. Proven ability to lead and manage teams of Technical Support Level 3 professionals in defending networks and strengthening cybersecurity posture. Skilled in penetration testing, forensics investigation, and identity/access management across AWS, Azure, and SaaS environments. Experienced with firewall security, VPNs, and forensic tools like Autopsy and Volatility. Active in cybersecurity communities, attending and sharing knowledge at ALTSECCON, ISACA, Black Hat, Veeam, and Qualys events. Proficient in Microsoft 365 Defender, Sentinel, and Defender for Cloud. Dedicated to identifying vulnerabilities, securing assets, and ensuring data integrity.
Overview
8
8
years of professional experience
2
2
years of post-secondary education
1
1
Certification
Work History
Cyber Security Specialist
Halifax Water
04.2022 - 03.2025
- Implemented robust cybersecurity plan for Halifax Water, enhancing system security
- Managed vendor contracts, ensuring optimal cybersecurity measures
- Developed and maintained Incident Response plan, improving response time to threats
- Refined security monitoring tools to detect anomalies faster
- Streamlined security protocols to enhance the efficiency
- Optimized cybersecurity workflow, reducing system vulnerabilities
- Pioneered advanced threat analysis strategies, boosting system resilience
- Identifying and mitigating risks from past security audits
- Mentored staff on cybersecurity best practices, enhancing team capabilities
- Perform server and security audits and disable employee logins that are determined to be compromised
- Prepare reports about the status of the information security monitoring service including Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs)
- Develop and maintain the Incident Response plan, playbooks, and contacts list
- Make recommendations regarding identification and mitigation of cybersecurity related risks as part of Halifax Water Enterprise Risk Management Program
- Assist with Cyber security manager, Co-Ordinator, and Team for Cyber projects
- Create and maintain workflows as required
- Manage operational tickets related to the Cybersecurity
- Systematically updated security compliance protocols to meet new industry standards
- Analyzed and revamped cybersecurity measures, enhancing system integrity
- Mentored junior team members on technical aspects of cybersecurity while fostering a culture of continuous learning and improvement.
- Enhanced network security by implementing advanced threat detection and prevention tools.
Cyber Security Engineer
Fidelity Canada
08.2019 - 02.2022
- Managed security posture through auditing tools like Rapid7, Nessus/Tenable, Qualys and SolarWinds
- Scripted Python for network automation and security enhancements
- Led cyber incident response plans, training staff for optimal security
- Oversaw cloud security product definition, including vendor and platform integration
- Conducted annual security reviews to ensure accurate control assessments
- Refined security documentation processes, ensuring precision in compliance and audit trails
- Develop and implement a plan for annual IS security audits
- Developed cutting-edge tools for enhanced network security monitoring and threat analysis
- Pioneered automation scripts in Python to boost network security and efficiency
- Enhanced incident response speed through targeted team training
- Streamlined cloud security integration with top industry platforms
- Improved compliance by revamping security documentation workflows
- Evaluated and enhanced cybersecurity measures, reducing potential threats by 30%
- Boosted system defenses by integrating advanced threat detection algorithms
- Introduced biometric authentication methods to tighten network access security
Cyber Security Analyst
Publicis Sapient
05.2017 - 01.2019
- Hunting for and identifying threat actor groups and their techniques, tools, and processes
- Conducting Exploratory Data Analysis (EDA), including acquiring, engineering, and exploring various data types and log sources for detection opportunities
- Strong understanding and passion for CI/CD methodologies and supporting tooling just as Jenkins
- Working with the detections engineering team to transform attacker TTPs into viable, low false positive behavioral and signature detections using variety of techniques including supervised, semi-supervised, and unsupervised ML, with an emphasis on sequential classification and pattern matching
- Participating in 'hunt missions' using threat intelligence, analysis of anomalous log data and results of brainstorming sessions to detect and eradicate threat actors on corporate networks
- Providing expert analytic investigative support of large scale and complex security incidents
- Performing analysis of security incidents for further enhancement of alert catalog
- Efficient in Python, C, PowerShell scripting and programming languages
- Continuously improving processes for use across multiple detection sets for more efficient operations
- Documenting best practices using available collaboration tools and workspaces
- Identifying key attributes (TTP's) and develop Indicators of compromise (IOC's)
- Communicating potential threats suspicious/anomalous activity malware, etc
- To the IR team, and be a point of contact to the other teams
- Conducting forensic analysis of network packet captures, DNS, proxy, NetFlow, malware, host-based security, and application logs, as well as logs from various types of security sensors
- Participated in gathering and analysis of evidence from regulatory agencies
- Managed and maintained inventory resources relating to forensic evidence
Education
Master's Degree - Master of Administrative science and Forensics
Fairleigh Dickinson University
Vancouver, BC 01.2019 - 02.2021
Skills
SIEM ( Sentinel MS )
Certified ethical hacker
Vulnerability assessment ( Nessus, Rapid7 & Qualys )
Network security management
Open source security tools
Network access control
Physical security
Intrusion detection systems
Multi-factor authentication ( Okta & MS )
Internet of things security
Patch management ( Qualys & Nessus )
Zero trust architecture ( MS )
Incident response planning
Wireless network security
Information security policies ( NIST 2024)
Firewall administration ( Cisco & Crowdstrike )
Penetration testing
Phishing awareness training ( Terranova, KnowBe4 & Beauceron)
Endpoint protection platforms ( EDS MS & Cisco )
Computer forensics ( Metasplot Linux)
Malware analysis ( Rekall, Volatility, MobSF & io)
Wireshark software
Security testing
Information protection
Email Protection Services ( MS, Proofpoint & Beauceron)
Certification
CEH
Timeline
Cyber Security Specialist
Halifax Water
04.2022 - 03.2025
Cyber Security Engineer
Fidelity Canada
08.2019 - 02.2022
Master's Degree - Master of Administrative science and Forensics
Fairleigh Dickinson University
01.2019 - 02.2021
Cyber Security Analyst
Publicis Sapient
05.2017 - 01.2019