Sai Charan Reddy

About Sai Charan Reddy

I am a Security Engineer with +4 years of experience designing, implementing, and optimizing security solutions across enterprise and cloud environments. My expertise spans Zero Trust Architecture (ZTA), cloud security (AWS, Prisma Cloud), SIEM platforms (Splunk, IBM QRadar), and endpoint protection tools like Cisco XDR and CrowdStrike. I have a proven track record in threat detection engineering, vulnerability management, and incident response, leveraging automation and scripting (Python, API integrations) to streamline SOC workflows and enhance detection capabilities. Throughout my career, I have worked to reduce false positives, improve MTTD (Mean Time to Detect), and enhance overall security posture for global enterprises. Key highlights of my experience include: Implementing Zero Trust policies and deploying AI-based threat detection, improving novel threat detection by 45%.Automating incident response with SOAR platforms, reducing response times by 40%.Conducting cloud security assessments and ensuring compliance with security standards like PCI-DSS, GDPR, and CCPA.Leading vulnerability management efforts with tools like Tenable and Qualys, achieving 95% patch compliance. I am passionate about advancing cybersecurity practices and driving security automation to create robust and resilient systems. I am always looking for new challenges in the world of security, cloud environments, and automation.

Experience

1. Security Engineer

   Cisco

   Sep 2024 — Present · NY, US

   Deployed Cisco Hypershield across 800+ cloud and on-prem workloads, implementing exploit protection, microsegmentation and zero trust policies that blocked 150+ lateral movement attempts and detected anomalous traffic.• Integrated Cisco XDR with Cisco Secure Endpoint, Firepower NGFW and Splunk SIEM, optimizing threat detection and correlation rules to reduce false positives by 40% and improve MTTD by 20 minutes per incident.• Implemented Cisco Breach Protection Suite components and built security data pipelines ingesting 80GB+ of daily telemetry, creating SOC dashboards and threat detection rules that improved the Alert-to-Incident ratio from 15:1 to 8:1.• Administered endpoint security and identity access management (IAM) using Cisco Secure Endpoint and Duo Multi-Factor Authentication (MFA) across 3,200+ endpoints, achieving 98% policy compliance and coordinating malware incident remediation within a 24-hour SLA.• Investigated and triaged 400+ weekly security alerts using Cisco XDR and Splunk SIEM, performing incident response, threat hunting and log analysis using Cisco Talos threat intelligence and mapping investigations to the MITRE ATT & CK framework.• Conducted vulnerability management and risk assessments using Tenable, scanning 3,200+ assets and coordinating remediation for 200+ critical CVEs, achieving 95% patch compliance and reducing the organization’s security exposure score by 15%.• Developed Python automation scripts leveraging Cisco and Splunk APIs for security log parsing, compliance reporting and vulnerability tracking, automating SOC workflows and saving 12+ hours of manual security operations work per week.

Education

• University of Central Missouri

  Master's degree, Cybersecurity and information assurance

• SREYAS INSTITUTE OF ENGINEERING & TECHNOLOGY

  Bachelor of Technology - BTech, Electronic and Communications Engineering