Bobby Reddi

About Bobby Reddi

Cybersecurity Analyst with 3+ years of experience in SOC operations, specializing in SIEM/SOAR, incident response, cloud security, and endpoint defense. Skilled in Microsoft Sentinel, Defender XDR, Entra ID, Splunk, CrowdStrike, and vulnerability management. Certified AZ-500, SC-200, and CompTIA Security+, focused on automation and risk-driven security improvements.

Experience

1. Security Analyst

   Ericsson

   Jun 2023 — Present

   Experience with SIEM Azure Sentinel. Experience in implementation of use cases using KQL with complex correlation across different data sources in Azure sentinel. Experience in Develop analytics rules, incidents, playbooks, notebooks, workbooks, threat hunting, and KQL queries for data normalization and parsing capabilities within the Log Analytics data ingestion pipeline. Experience in Implementing SIEM code and logic rules per the specifications provided by the SIEM Rule Designer for Azure Sentinel SIEM. Regularly acknowledged, analyzed, and triaged incoming security alerts; maintained detailed documentation and playbooks for security event handling and escalation procedures. Directed and managed enterprise-wide vulnerability assessments using tools such as Qualys, Nessus, Microsoft Defender, CrowdStrike, and Wiz — prioritizing remediation based on business risk, CVSS score, and exploitability. Leveraged Crowdstrike Falcon\'s threat intelligence capabilities to proactively identify emerging threats and vulnerabilities, allowing for preemptive action to mitigate risks. Proficiency in setting up and fine-tuning ASR policies. Experience in performing host based analysis, and artifact analysis using EDR ATP Defender & Crowdstrike Falcon. Administered and continuously enhanced DLP programs through Microsoft Purview, including policy configuration, alert analysis, reporting, and stakeholder engagement to safeguard sensitive data and prevent leakage. Proactively monitored, analyzed, and responded to security events through SIEM/SOAR platforms including Azure Sentinel (KQL), Splunk, and Logic Apps, ensuring accurate incident triage and timely escalation. Strengthened cloud and hybrid infrastructure by leveraging Microsoft Defender for Cloud, Azure CSPM, Wiz, and CWP to identify misconfigurations, enforce security controls, and align with cloud governance frameworks.

Education

• Jawaharlal Nehru Technological University Kakinada Jntuk

  Btech, Civil Engineering

  2016 — 2019