Poshan Bhandari

Cybersecurity Analyst with 5+ years of experience in vulnerability management, threat detection, and incident response. Skilled in risk-based prioritization and CVSS scoring to assess and remediate vulnerabilities across Windows, Linux, and cloud environments. Partners with technology teams to drive remediation within SLAs and produces vulnerability metrics and reporting for stakeholders. Hands-on with Tenable, Microsoft Defender, and Sentinel (KQL).

Cyber Security Analyst (Vulnerability Management & SecOps Intern) at Log(N) Pacific (2026-01 – Present)

• Drove a 100% reduction in critical, 90% in high, and 76% in medium vulnerabilities for the server team via Tenable scanning and PowerShell-based remediation.
• Performed internal vulnerability assessments and validated scan results using Tenable and CVSS scoring across Windows and Linux environments.
• Partnered with system owners on remediation plans and tracked findings to resolution within SLAs, reviewing false positives and exceptions.
• Executed secure configuration and compliance audits (DISA STIG) with Tenable to meet industry and regulatory standards.
• Built Microsoft Sentinel dashboards and weekly vulnerability metrics to report threats and remediation progress to stakeholders.
• Developed custom detection rules in Microsoft Defender for Endpoint to automate isolation and investigation of compromised systems.
• Performed EDR threat hunting to detect IOCs from brute-force, exfiltration, and ransomware; documented threat scenarios and playbooks for tabletop exercises.
• Eliminated recurring brute-force incidents by implementing inbound NSG/firewall rules to limit internet exposure.
• Used KQL extensively to query logs across SIEM and EDR platforms.

Cyber Security Analyst at WinWin Labs (2024-06 – 2025-07)

• Built a structured vulnerability management, monitoring, and detection program from the ground up in a startup, reducing critical vulnerabilities by 80%+ across Azure-hosted systems.
• Implemented ELK Stack and Suricata; developed brute-force and phishing detection rules with real-time alerting, reducing mean time to detect (MTTD).

Cyber Security Analyst at Monal Tech Pvt. Ltd (2019-12 – 2023-10)

• Conducted vulnerability assessments and penetration tests (VAPT) for diverse organizations, strengthening their overall security posture.
• Identified and reported critical vulnerabilities (SQLi, credential leakage, RCE, XSS) to major institutions, preventing potential data breaches.
• Managed the vulnerability management lifecycle; scanning, patching, and risk assessment; achieving an 80% reduction in vulnerabilities.

Master's in Cyber Forensics and Security – Illinois Institute of Technology

Bachelor's in Computer Networking and IT Security – Islington College