Nisha N

Information Security professional with hands-on SOC/SIEM alert monitoring and triage (Splunk), cloud security posture management (CSPM/DSPM/KSPM concepts) across AWS — IAM, KMS, WAF, VPC — and automated threat detection/incident response (GuardDuty, CloudTrail, Lambda). CompTIA Security+ and AWS Certified (Cloud Practitioner, Solutions Architect – Associate).

Background in penetration testing, vulnerability assessment & management, and secure-SDLC/OWASP Top 10 practices. Proficient in Python/Bash automation, Terraform (IaC scanning), Kubernetes (EKS) security, and CI/CD vulnerability scanning (Trivy), with working knowledge of ISO 27001, SOC 2, and NIST CSF 2.0.

Associate Software Engineer at IAST Software Solutions (2025-03 – Present)

Client: Aptiv

• Performed WiFi penetration testing and MITM (Man-in-the-Middle) attack simulations on automotive ECUs to identify, assess, and remediate security vulnerabilities
• Conducted UART fuzzing and hardware-level security assessments as part of embedded security testing and vulnerability management
• Developed cryptographic API integrations in Python for secure communication protocols, applying secure coding and encryption principles transferable to cloud application security
• Monitored and triaged security alerts and logs in Splunk (SIEM) to identify anomalies, supporting investigation and troubleshooting of security-relevant events
• Applied Secure SDLC principles across the testing lifecycle — vulnerability identification, root-cause analysis, and remediation documentation

B.E. in Electrical and Electronics Engineering – BMS College of Engineering