Nikhil Ch

About Nikhil Ch

I’m a Cloud Security Engineer with 7+ years of experience securing AWS and Azure…

Experience

1. Senior Cloud Security Engineer

   Landis+Gyr

   Nov 2024 — Present · Atlanta, GA, US

   Led the design and implementation of secure cloud architectures in AWS and Azure, reducing cloud misconfigurations by 45% through automation and governance frameworks. • Conducted continuous monitoring of enterprise systems using Splunk (SIEM), CrowdStrike Falcon (EDR), and Tenable Nessus.• Maintained and updated System Security Plans (SSPs) documenting implementation of security controls.• Architected and deployed DevSecOps pipelines using Jenkins, Terraform, and SAST/DAST tools, improving code security coverage across development stages. • Developed and delivered security awareness programs focused on CUI handling, phishing defense, insider threat, and privileged user risks.• Automated incident response workflows with XSOAR, AWS Lambda, and Logic Apps, cutting average response times by 40% and improving SOC efficiency. • Conducted security assessments and remediation using Wiz, Orca, and Prisma Cloud, improving multi-cloud compliance alignment. • Created 40+ custom detection rules and dashboards in Splunk and Azure Sentinel, boosting alert accuracy and reducing false positives. • Enforced Zero Trust by leading IAM hardening initiatives, including MFA and PAM (CyberArk, Thycotic), reducing privilege escalation incidents by 50%. • Guided internal teams through audit readiness for ISO 27001, SOC2, and FedRAMP, resulting in 100% successful audit outcomes. • Acted as security SME in cross-functional product teams, embedding security-by-design principles in cloud-native infrastructure.

Education

• JNTUH College of Engineering Hyderabad

  Bachelor of Technology - BTech, ece

  2014 — 2018

• Christian Brothers University

  Masters, Computers and information systems