Skip to content

Eswar Prasad Reddy Venna

Information Security Analyst - SIEM, Incident Response • St Louis, MO, USA • e**************@gmail.com • +13******862 • linkedin.com/••••• • medium.com/•••••

Professional Summary

Information Security Analyst with 4 years of experience in SIEM, EDR, threat detection, incident response, compliance frameworks using NIST, ISO 27001, SOC 2, and AI-driven security automation. Architected an AI-powered cybersecurity assessment platform that reduced compliance cycles from 3 months to 2 weeks. Delivers scalable security monitoring, governance automation, and risk management solutions that strengthen enterprise resilience and audit readiness.

Technical Skills

Security Monitoring & Detection: Palo Alto XSIAM,SIEM,Splunk,Microsoft Defender E5,EDR,Security Monitoring,Threat Hunting,MITRE ATT&CK
Incident Response & Threat Analysis: Incident Response,Security Incident Handling,Incident Response Playbooks,Malware Analysis,Network Forensic Tools,Incident Documentation
Network Security & Infrastructure: TCP/IP,DNS,DHCP,Firewall Configuration,Network Connectivity Testing
Identity & Access Management: Active Directory,Group Policy,Domain Controller Administration,Azure AD,LDAP,CyberArk,Intune
Security Automation & Scripting: Python,Bash,PowerShell
Governance & Compliance: NIST,NIST 800-53,NIST 800-171,CMMC 2.0,ISO 27001,PCI-DSS,SOX,GDPR,FERPA,HIPAA

Work Experience

Arkana Infotech
Memphis
Cybersecurity Engineer
Mar 2026 – Present
Global IT services provider; analyst implemented enterprise endpoint and identity security solutions, elevating threat management for large client environments.
  • Engineer and maintain endpoint security controls across enterprise macOS and Windows fleets, deploying and tuning Microsoft Defender for Endpoint and SentinelOne to strengthen EDR coverage.
  • Partner with infrastructure teams to manage macOS endpoints via Jamf and Intune, aligning device configuration and compliance policies with Zero Trust initiatives.
  • Tune EDR detection rules and exclusions across Defender for Endpoint and SentinelOne, reducing alert noise and improving triage speed for the security operations team.
  • Lead endpoint hardening and vulnerability remediation for macOS devices, coordinating with IT and compliance stakeholders to close audit findings.
  • Support incident response for endpoint-based threats, using EDR telemetry and forensic tooling to contain and document incidents in line with playbook procedures.
KETechies
St Louis
Information Security Analyst
Aug 2025 – Feb 2026
Security consultancy where analyst automated SOC workflows and multi-framework compliance monitoring to strengthen clients’ operational security and governance.
Tech Stack: Ansible, SOC 2, ISO 27001, HIPAA, FERPA, PCI-DSS, GDPR, Security Dashboards, Vendor Risk Management, Incident Response Playbooks, KPI Monitoring
  • Automated alert enrichment, triage, notifications, and reporting workflows, improving security operations efficiency by 35% while strengthening SOC 2 and ISO 27001 control alignment.
  • Managed security dashboards and KPIs (MTTR, SLA, vulnerability SLAs) across enterprise systems, enabling continuous compliance monitoring and executive visibility.
  • Remediated multi-framework compliance gaps across HIPAA, FERPA, PCI-DSS, GDPR, ISO 27001, and SOC 2 by driving control ownership and closure, reducing audit findings.
  • Collaborated with cross-functional security and compliance stakeholders to execute third-party risk assessments, enhancing vendor oversight and governance maturity.
  • Optimized incident response playbooks and operational runbooks using Ansible, reducing response time by 25% and improving policy alignment and process efficiency.
Merlin Solutions
Huston, TX
AI Security & Governance Analyst
Aug 2025 – Oct 2025
Cybersecurity SaaS firm specializing in AI-powered compliance; analyst engineered platforms and data pipelines that expedited audit readiness for security & governance teams.
Tech Stack: Python, SQL, RAG, Large Language Models, AI Agentic Workflows, Data Ingestion Pipelines, Risk Scoring Pipelines, Compliance Automation
  • Architected an AI-driven cybersecurity assessment platform, reducing compliance cycles from 3 months to 2 weeks through automated evidence collection and control validation.
  • Orchestrated agentic AI workflows integrating RAG pipelines and LLM evaluations to generate auditor-ready outputs for DDQs and governance reviews.
  • Automated unstructured data ingestion and risk scoring using Python and SQL, improving control coverage analysis speed by 60%.
  • Partnered with an 8-member security and compliance team to align AI reporting with audit standards, strengthening audit readiness.
  • Engineered scalable data pipelines using Python, SQL, and LLM frameworks, boosting compliance workflow efficiency by 50%.
Saint Louis University
St. Louis, MO
Informtion Security Analyst
Jan 2024 – May 2025
Research university; intern supported campus information security, advancing risk assessments, incident response, and policy compliance for academic and administrative networks.
Tech Stack: ACAS, Microsoft Defender E5, MITRE ATT&CK, NIST 800-53, Palo Alto XSIAM, EDR, Firewall, Active Directory, Group Policy, ISO 27001, SIEM, Splunk
  • Executed security risk assessments and vulnerability scans using ACAS and Microsoft Defender E5, mitigating critical threats and reducing high-risk vulnerabilities by 30%.
  • Developed incident response procedures aligned with MITRE ATT&CK and NIST 800-53, reducing breach response time and improving containment effectiveness.
  • Resolved security gaps by reconfiguring Palo Alto XSIAM, EDR, firewall rules, and strengthening Active Directory and Group Policy controls, lowering incidents by 25%.
  • Coordinated with an 8-member IT and compliance team to align policies with ISO 27001 and NIST frameworks, decreasing audit findings.
  • Automated security log analysis by implementing centralized monitoring through SIEM and Splunk, improving threat detection efficiency by 35%.
TATA Consultancy Services Ltd
Chennai, India
Information Security Analyst
Nov 2020 – Jul 2023
Global IT services provider; analyst implemented enterprise endpoint and identity security solutions, elevating threat management for large client environments.
Tech Stack: Microsoft Defender E5, EDR, Defender for Identity, Active Directory, Domain Controller, Azure AD, ACAS, MITRE ATT&CK, AIR, ASR, SIEM
  • Deployed endpoint protection using Microsoft Defender E5 and EDR solutions across enterprise environments, securing 1,000+ devices and reducing endpoint vulnerabilities.
  • Configured Defender for Identity on Active Directory and Domain Controllers, mitigating identity-related incidents by 40% and strengthening Azure AD security controls.
  • Directed Threat and Vulnerability Management initiatives using ACAS and MITRE ATT&CK methodologies, identifying exposed risks and improving compliance posture by 40%.
  • Led cross-functional collaboration with 5+ security teams to integrate AIR and ASR policies, reducing incident resolution time across operations.
  • Executed migration of 500 endpoints and servers to Microsoft Defender E5 with SIEM integration, enhancing threat analytics and improving detection efficiency.

Projects

Red Team vs Blue Team | Jan 2024 – Mar 2024
Tools Used: Kali Server, Metasploitable 2, GoPhish, Nmap, Wazuh, Crowdsec, Tablue, SPSS, Splunk, Defender E5
  • This project main aim is to perform penetration test automation, where both the red and the blue team have significant roles to play.
WPA Handshake Capture Attack | Nov 2024 – Dec 2024
Tools Used: Kali Linux, Aircrack-ng suite, Alfa Network Adapter
  • WPA Handshake Capture is a process used in network security to capture the four-way handshake

Education

Saint Louis University
Master of Science in Cybersecurity • St Louis • Aug 2023 – May 2025
Jawaharlal Nehru Technological University - Kakinada
Bachelor of Technology in Electronics and Communication Engineering • Vijayawada, India • Jun 2016 – Oct 2020

Certifications

SC-200 — Microsoft • Feb 2024

Achievements

  • WWT Capture the Flag 2024 – 2nd Place: Secured 2nd place representing the Cyber Billikens team from Saint Louis University in a competitive cybersecurity CTF event.
  • National Cyber League (NCL) Spring 2025: Top 5% National Rank: Placed 34th out of 602 participants, achieving 95th percentile in Cryptography, OSINT, and Scanning & Reconnaissance, awarded a Challenge Coin for outstanding performance.
  • National Cyber League (NCL) Fall 2024: Top 7% National Rank: Ranked 55th out of 691 participants, demonstrating strong skills in Enumeration & Exploitation, Log Analysis, and Cryptography, and awarded a Challenge Coin for outstanding performance.
  • Special Initiative Award : Tata Consultancy Services (TCS): Recognized for exceptional contributions and impactful initiatives that delivered measurable value to the organization.
  • Research Publication: Machine Learning for Air Pollution Prediction: Authored and published a research paper on predictive modeling of air pollution using machine learning and neural networks in the International Journal of Scientific and Technology Research.

Powered by Drivetube · Create your own profile at drivetube.ai

Explore Drivetube

  • Drivetube Profile — your free digital resume — at drivetube.ai/in/your-name: one true standard resume with a Hiring Snapshot (visa status, expected salary, notice period, work preference, relocation), an ATS-ready PDF download and a single shareable link. Free forever; interview requests come from verified employers and your contact details stay masked until you accept. Documentation.
  • Free Job Board — verified openings crawled ATS-by-ATS from 100,000+ real company career pages across 35 ATS platforms. Shows the true posting date from the source ATS — not when a listing was indexed — and deletes every general listing 3 days after it was actually posted. No ghost jobs, no ad-sponsored listings, no staffing reposts, no account needed. Documentation.
  • Job Hunt Program — managed job hunting, a one-time purchase from $199.99. JobScout matches verified roles to your real experience band, Blend AI writes a uniquely tailored resume and cover letter for every application, and the Autofill extension fills the form — or Let Us Apply submits it for you. Documentation.
  • Resume Writing Services — human-written, ATS-optimised resumes by senior career writers, from ₹499.99 / $25.99. Available in every country, written to the destination country's own standard — a US resume, UK CV, German Lebenslauf and Indian resume are genuinely different documents. A paid service, separate from the free Drivetube Profile. Documentation.
  • Community Membership — from $4.99/month (₹1,999/year in India). Unlocks the gated job-board filters — visa sponsorship, security clearance, workplace and application time — plus Job-Scout AI matching, Resume Report AI, Interview AI prep sheets, Recruiter Outreach AI sent from your own Gmail, Apply or Skip triage, a daily market feed and a $10,000+ library including 23 ATS-validated resume templates. Documentation.
  • Drivetube Hire — for employers — hiring with no job postings and no applications. Paste your real job description and AI matches it against candidates' true standard resumes, returning ranked candidates with a match %, matched and missing skills and written reasoning. Free tier included; employers pay, candidates never do. Documentation.

Full product documentation — every product explained, with feature-by-feature comparisons against the job boards, AI apply tools, resume services and hiring platforms people actually use.

The job board covers the United States, India, United Kingdom, Canada, Europe and Australia, and Resume Writing Services are available in every country.