Shegufa Haque Anna

About Shegufa Haque Anna

Cybersecurity Analyst passionate about strengthening enterprise security through…

Experience

1. Cyber Security Analyst

   Log N Pacific

   Sep 2025 — Present · CA, US

   Performed organization-wide vulnerability scans, delivered comprehensive reports, and implemented PowerShell-based remediations—achieving 100% reduction in critical, 89% in high, and 77% in medium vulnerabilities for the server team.• Conducted vulnerability assessments and risk-based prioritization using Tenable across both Windows and Linux environments.• Executed secure configuration checks and compliance audits using DISA STIG benchmarks through Tenable to align with industry security standards.• Automated remediation workflows and STIG configuration implementations using PowerShell, ensuring rapid mitigation of critical vulnerabilities.• Gained a strong understanding of the relationship-focused side of Vulnerability Management, including rapport building, trust, transparency, and balancing security with business needs. • Performed threat hunting using EDR tools to identify IoCs related to brute-force activity, data exfiltration attempts, and ransomware behavior.• Implemented an Azure honeypot, ingested Windows Security logs into Microsoft Sentinel, and built custom detection rules for brute-force activity.• Designed, tested, and published advanced threat-hunting scenarios to support incident response tabletop exercises.• Developed custom Microsoft Defender for Endpoint detection rules to automate system isolation and streamline investigation of compromised hosts.• Eliminated brute-force incidents (100% reduction) by implementing targeted inbound NSG/firewall rules to limit unnecessary Internet exposure.• Built Microsoft Sentinel dashboards to monitor failed logons and malicious traffic patterns enriched with threat intelligence.• Worked extensively with KQL (similar to SQL/SPL) to analyze logs across SIEM and EDR platforms.