Product Security Analyst

Performed security assessments, threat modeling, vulnerability analysis, and technical design reviews for cloud-hosted applications and infrastructure. Documented exploitability, business impact, and remediation priorities.

Validated vulnerability and configuration findings from AWS Inspector, CSPM tooling, and penetration-test outputs. Coordinated remediation through ServiceNow and Git-based workflows while applying OWASP Top 10, NIST 800-53, CIS Benchmarks, and risk-based security principles.

Developed Python, PowerShell, Bash, and REST API automation for evidence collection, vulnerability reporting, security validation, and repeatable workflows. Produced technical documentation, remediation guidance, risk summaries, and security findings for stakeholders.

Improved cloud security posture from 78% to 95% through attack-path analysis, Azure Policy, Defender for Cloud, Entra ID, RBAC, security reviews, and coordinated remediation.

Performed vulnerability analysis using Qualys and cloud-security telemetry, validated findings in technical context, prioritized issues by exploitability and business risk, and reduced high-risk vulnerabilities by 28%.

Reviewed application and cloud security controls across Azure environments and automated security validation, evidence gathering, access reviews, and reporting with PowerShell and Azure-native tooling.

Deployed and operated Nessus vulnerability scanning for critical systems, validated findings, coordinated remediation with technical owners, and eliminated 32% of high-risk configurations.

Analyzed AWS CloudTrail, CloudWatch, and Security Hub telemetry to investigate suspicious activity, access anomalies, configuration weaknesses, and cloud-security findings.

Provisioned standardized AWS infrastructure with CloudFormation, embedding IAM, encryption, logging, network controls, and secure configuration into repeatable deployment patterns. Reviewed Linux, Windows, network, and cloud configurations and produced remediation documentation.

Investigated and resolved more than 200 security events annually across over 3,000 endpoints using Microsoft Sentinel and Splunk. Analyzed evidence, determined incident scope and impact, and coordinated response actions.

Performed phishing, authentication, network, and endpoint investigations by correlating telemetry from multiple sources. Supported vulnerability-management workflows by validating findings, coordinating remediation, and tracking corrective actions.

Conducted root-cause analysis and produced incident summaries, technical findings, and remediation recommendations, contributing to an 18% reduction in repeat incidents.