S
Sreekarprasad reddy Nandireddy
About
Detail
Telangana, India
Résumé
Jobs
verified_user
0% verified
Sr. Penetration TesterCoreWeaveJul 2024 - Current (2 years 4 months)Conducted network pentests with Metasploit, Nessus, Nmap, identifying privilege escalations, lateral moves, and exploits, refining remediation workflows. Tested web apps using Burp Suite and Hydra, identifying REST API and OAuth flaws in cloud/mobile setups, expediting patching of critical security issues. Headed wireless security tests, emulating threat actors through Wireshark, Aircrack-ng, Cobalt Strike, detecting rogue access and WPA2 vulnerabilities. Conducted AWS, Azure, GCP cloud audits, identifying misconfigurations, IAM risks, and ensuring PCI, SOX, FISMA compliance within multi-clouds. Executed Red Team ops to evade EDR, SIEM with DLL injection process hollowing, LOTL, pinpointing detection gaps and boosting threat defenses. Integ- Application Security EngineerOptumJan 2023 - Jun 2024 (1 year 6 months)Integrated secure SDLC in CI/CD, automating SAST, DAST, IAST (SonarQube, ZAP, Veracode), securing deployments with minimal impact on DevOps flow. Designed ML-driven anomaly models for real-time threat detection; used behavior analysis to improve detection accuracy, reducing false positives. Led threat modeling for multi-tier apps with STRIDE/DREAD, advising secure architecture for PCI-DSS, SOC 2, and GDPR-compliant risk mitigation. Built dependency framework for open-source security with OWASP Dependency-Check, Snyk; prioritized third-party risks to secure software supply chain. Collaborated on DevSecOps automation with Python/Bash scripts, adding security validation, reducing review time in production-ready workflows. Ensured AWS, Azure, G
- CCybersecurity AnalystCactus CommunicationMar 2021 - Dec 2022 (1 year 10 months)Architected SIEM solutions for real-time threat detection, integrating threat intelligence feeds to enhance proactive, continuous defense measures. Conducted vulnerability assessments and penetration testing to identify weaknesses and apply rapid remediation, securing critical infrastructure. Led threat hunting across networks/endpoints, utilizing behavior analytics, network analysis, and intelligence sources to detect APTs and zero-day threats. Monitored network traffic and alerts, using Splunk for log analysis to identify suspicious activity, ensure compliance, and prevent potential breaches. Analyzed incidents and performed forensic investigations to trace attack vectors and root causes, producing insights to strengthen defense mechanism
Education
verified_user
0% verified
- OOffensive Security Web Expert (OSWE)
- OOffensive Security Exploit Developer (OSED)
- CCompTIA Cybersecurity Analyst (CYSA+)
- CCertified Ethical Hacker (CEH)
- CCertified Information Systems Security Professional (CISSP)
- RMasters in Computer ScienceRIVIER university, NH