Open to opportunities

itsme nani

@itsmenani

Message

Cyber Security Engineer focused on PAM, SIEM-driven incident response, and DevSecOps application security.

United States

Message

What I'm looking for

I’m looking to strengthen enterprise security in regulated environments—owning PAM and SIEM-driven incident response, improving least-privilege controls, and supporting secure SDLC/DevSecOps to reduce risk and pass audits confidently.

I’m a Cyber Security Engineer with 5+ years of experience supporting enterprise security operations across manufacturing and regulated environments. I bring strong hands-on exposure to Privileged Access Management (PAM) operations with CyberArk, identity and access controls, SIEM monitoring, and incident response workflows, consistently improving access security through least-privilege and audit-driven controls.

At McKesson, I supported PAM L2/L3 tasks like account onboarding, access troubleshooting, credential rotation, and incident resolution, while integrating IBM QRadar investigations with Active Directory controls and ServiceNow security workflows. Previously at Merck Group, I strengthened secure delivery by embedding SAST/DAST/SCA into CI/CD pipelines (Jenkins, GitLab), performing threat modeling and penetration testing, and automating vulnerability assessment with Python—backed by compliance work aligned to GDPR and ISO 27001.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Engineer

Current

McKesson

Feb 2023 - Present (3 years 3 months)

Supported Privileged Access Management (PAM) operations, including access reviews, credential rotation, and policy enforcement for critical systems. Investigated privileged access events in IBM QRadar, managed service accounts and RBAC in Active Directory, and coordinated incident remediation through ServiceNow while supporting NIST/CMMC compliance evidence.

Privileged Access Management (PAM)IBM QRadar SIEM Active Directory Incident Response

Application Security Engineer

Merck Group

Jan 2020 - Jul 2022 (2 years 6 months)

Conducted SAST/DAST and integrated SCA into CI/CD pipelines to reduce vulnerabilities before deployment. Led threat modeling and penetration testing initiatives, built Python automation for security reporting, and collaborated with DevOps and privacy/compliance teams to support GDPR and ISO 27001 requirements across Windows/Linux applications.