Sarvani Yaddanapudi

About Sarvani Yaddanapudi

Having 4 years of experience in IT industry with technical expertise in Vulnerability Management.My work experience includes,Vulnerability Remediation & Communication: Proficient in communicating vulnerability remediationstrategies to affected users and stakeholders.• Expertise in reporting zero-day vulnerabilities, conducting impact assessments, and addressing CISAKnown Exploitable Vulnerabilities, ensuring timely remediation and minimizing risk to critical systems.• Infrastructure Security: Hands-on experience in generating detailed monthly reports for iDMZ(Industrial Demilitarized Zone) and SilentDefense systems. These reports provide insights into systemvulnerabilities, patch status, and overall network security.• Skilled in conducting thorough vulnerability scans, using both active scans (which directly interact withthe target systems to identify vulnerabilities) and agent-based scans (which rely on installed agents ondevices for continuous monitoring). These scans are crucial during both the commissioning of newservers to ensure they meet security standards and the decommissioning of old servers to securelyremove them from the network, ensuring no security gaps are left behind.• Tenable.io and Tenable.sc for detecting, assessing, and tracking IT vulnerabilities across various systems and networks.• CrowdStrike for endpoint protection and identifying threats within OT environments. SilentDefense formonitoring and analyzing vulnerabilities in Operational Technology (OT) environments, particularly incritical industrial networks.• ServiceNow is used for tracking and managing incidents, creating and assigning tickets, and ensuringremediation efforts are completed within SLA timelines.• PowerBI to create dashboards and reports that visualize vulnerability trends, security metrics,and patching progress. This helps in making informed decisions and keeping stakeholders updated.• Incident Management: Actively involved in resolving P1, P2, and P3 incidents within SLA timelines,coordinating with cross-functional teams to troubleshoot and resolve issues efficiently.• Zero-Day Response & Risk Assessment: Providing immediate response to zero-day vulnerabilities,conduct impact assessments on CVEs and associated plugins in our environment, and offer real-timeinsights to ensure swift resolution.• Reporting & Metrics: Responsible for generating regular reports for senior management on the status of vulnerabilities, patching efforts, and overall security posture.

Experience

1. Iii - Senior Analyst

   Deloitte

   Sep 2025 — Present · IN

Education

• CMR Institute of Technology, Hyderabad

  Bachelor of Technology - BTech