Network Security Analyst

SUBRAHMANYA PUSAPATI

Email: **************@*****.*** 314-***-****

PROFESSIONAL SUMMARY

Network and Cybersecurity Engineer with hands-on experience in designing, configuring, and securing enterprise networks across on-premises and cloud environments (AWS, Azure, GCP). Skilled in routing and switching, firewall configuration, VLANs, VPNs, IDS/IPS, and packet analysis. Proven ability to integrate network infrastructure with secure access controls, SIEM monitoring, and compliance frameworks. Adept at using tools like Wireshark, pfSense, Splunk, and Nessus to optimize performance and safeguard network assets. Passionate about network resilience, automation, and collaborating with cross-functional teams to strengthen infrastructure and security posture.

EXPERIENCE

RH Technologies – Network Security Analyst

Sep 2024 – Present

Managed network and cloud security operations across AWS, Azure, and GCP environments.

Analyzed network logs and traffic anomalies using Wireshark, Splunk, and Microsoft Sentinel to detect and respond to threats.

Tuned firewall policies and VPN configurations to enforce segmentation and secure remote access.

Led RBAC and IAM implementations through Active Directory and Azure AD to protect network access.

Performed vulnerability assessments using Nessus and Rapid7, collaborating with infrastructure teams for remediation.

Designed and optimized network monitoring dashboards in Splunk for faster alert response.

Coordinated with compliance and infrastructure teams to align network architecture with NIST, HIPAA, and GDPR standards.

Mentored junior analysts in network troubleshooting, firewall rule analysis, and packet inspection.

Charter Spectrum – Network Security Analyst

Dec 2022 – Aug 2024

Built and maintained a multi-tiered virtual lab simulating complex enterprise networks and firewall environments.

Configured pfSense firewalls, Windows/Linux servers, and domain controllers to support training and testing.

Tuned SIEMs (Splunk, Sentinel) for log collection from routers, switches, and endpoint devices.

Conducted vulnerability scans and incident response simulations, using Wireshark for packet-level analysis.

Automated network log parsing, port monitoring, and IP reputation lookups using PowerShell and Bash scripts.

Performed network access audits, mapped privilege flows, and enforced least privilege policies.

Analyzed simulated attacks to evaluate firewall rule effectiveness and improve detection mechanisms.

Authored technical documentation for firewall rules, network diagrams, and simulation outcomes.

Mastercard – Cybersecurity & Network Analyst

Jan 2019 – Jul 2022

Monitored internal networks using Splunk and QRadar, investigating abnormal traffic patterns and unauthorized access attempts.

Conducted forensic analysis of compromised endpoints and supported firewall reconfiguration to block malicious IPs.

Reviewed access controls and privilege escalation paths across enterprise network systems.

Used Nessus and Qualys to identify and prioritize network vulnerabilities across on-premises and cloud infrastructure.

Ensured compliance with PCI-DSS and SOX by applying security baselines to network appliances and cloud workloads.

Worked with engineering teams to implement secure routing and VPN configurations.

Authored SOPs and technical documentation for firewall hardening and post-incident remediation plans.

Deepak Nitrite Ltd. – Network & Security Engineer

Apr 2017 – Dec 2018

Deployed and managed firewalls, VLANs, and routing protocols (RIP, OSPF) for secure network segmentation.

Monitored network performance using Wireshark and conducted root cause analysis for performance bottlenecks.

Implemented access control policies, password policy enforcement, and device patching to harden infrastructure.

Managed disaster recovery (DR) readiness through backup validation and system recovery drills.

Collaborated with third-party vendors to integrate secure network devices and ensure configuration compliance.

Documented network topology, device inventory, and firewall change requests for internal audits.

Cybersecure Labs – Network & Security Consultant (Independent)

Jan 2019 – Present

Designed and implemented lab environments with routers, switches, and firewall appliances (pfSense, Cisco Packet Tracer).

Configured and tested routing protocols (OSPF, EIGRP), firewall policies, and VPN tunnels.

Analyzed packet captures using Wireshark to understand attack vectors and validate detection rules.

Built and tested RBAC/ABAC role simulation environments and automated access review workflows.

Evaluated open-source security tools for network and endpoint monitoring and shared findings via detailed reports.

Developed PowerShell and Bash scripts to automate log parsing, alert correlation, and traffic filtering.

CERTIFICATIONS

CompTIA Security+

CCNA (in progress)

Microsoft SC-200: Security Operations Analyst Associate

Google Cybersecurity Professional Certificate

Nessus Essentials

(In Progress): Certified Ethical Hacker (CEH)

TECHNICAL SKILLS

Security Operations & Monitoring:

SIEM (Splunk, Microsoft Sentinel, IBM QRadar), SOAR, Log Analysis, Threat Detection, Incident Triage (L1/L2), Forensics (FTK, Forensic Explorer), Wireshark, EDR/XDR Platforms, Phishing Simulation, Alert Tuning

Cloud & Infrastructure Security:

AWS (GuardDuty, IAM), Azure (Security Center, Azure AD), GCP (Security Command Center), CSPM, CWPP, Cloud Identity & Access Policies, Hybrid Security Configurations

Vulnerability Management:

Nessus, Rapid7, Qualys, CVE/CVSS Analysis, Patch Validation, Risk Tracking via ServiceNow

Identity & Access Management (IAM):

Active Directory, Azure AD, RBAC/ABAC Implementation, MFA, PAM, Access Reviews, Conditional Access Policies

Network & Endpoint Security:

pfSense, VLAN Configuration, Firewall Rule Testing, IDS/IPS, DLP, Antivirus, Network Segmentation, Traffic Analysis

Scripting & Automation:

PowerShell, Bash – Log Parsing, Alert Automation, Access Audit Scripts, Security Playbook Automation

Compliance & Frameworks:

NIST 800-53, ISO 27001, HIPAA, GDPR, PCI-DSS, SOX, Security Documentation, Audit Preparation, GRC Support

Security Tools & Platforms:

ServiceNow (Ticketing & Workflow), Custom Security Labs, Splunk Dashboards, Detection Rule Development, Endpoint & Network Hardening

EDUCATION

Master of Science in Cybersecurity

Pace University, New York, USA

Bachelor of Engineering in Electronics & Communication Engineering

Babaria Institute of Technology, Gujarat, India

Ready to contribute comprehensive cybersecurity expertise in analyst and engineering roles, helping organizations proactively detect, mitigate, and defend against cyber threats.

Contact this candidate