Looking for a job

Naresh Chowdary

@nareshchowdary

Message

Cybersecurity Senior Manager at NopalCyber leading a 24-person team delivering attack surface reduction.

India

Message

At NopalCyber, I lead the Attack Surface Reduction practice and a team of 24, delivering offensive security engagements for more than 35 clients. I’m transforming delivery to cut cycle time while maintaining quality.

At OISSG Consultancy, I led cybersecurity engagements across Qatar and supervised penetration testing, red teaming, and OT and IoT security testing. I also supported clients in remediating attack paths and privilege escalation issues.

At Ernst & Young LLP, I led red team assessments and performed web and API penetration tests, internal network assessments, and cloud security reviews. Continuous penetration testing and guided remediation helped cut critical and high vulnerabilities from an average of 50% to 10%.

Experience

Work history, roles, and key accomplishments

Current

Senior Manager

Current

NopalCyber

Jan 2026 - Present (10 months)

Leading Attack Surface Reduction practice with a team of 24, delivering offensive security services to over 35 clients. Driving transformation in delivery structure and partnering with sales and finance to optimize margins.

Attack Surface Reduction Offensive Security Team Leadership MSSP Project Management Client Management

Technical Manager

OISSG Consultancy

Jan 2023 - Jan 2026 (3 years)

Led offensive security engagements including red teaming, network penetration testing, and SOC validation. Directed cybersecurity engagements across governmental, financial, and non-profit sectors in Qatar.

Red Teaming Penetration Testing Active Directory SoC Validation Purple Team OSINT DAST SAST Mast OT Security IoT Security

Manager

Ernst & Young LLP

Jul 2021 - Jan 2023 (1 year 6 months)

Led red team assessments and Microsoft 365 grant reviews. Supervised offensive security activities and performed ransomware readiness assessments for a US media conglomerate.

Red Teaming Microsoft 365 Azure Ransomware Readiness Assessments Offensive Security Penetration Testing

Consultant / Senior Consultant

Ernst & Young LLP

Sep 2017 - Jun 2021 (3 years 9 months)

Performed over 60 web and API penetration tests, led internal network assessments, and delivered external infrastructure tests. Designed and executed phishing campaigns and conducted cybersecurity maturity assessments.

Penetration Testing OWASP API Security Network Security Phishing AWS Security Maturity Assessments

Staff / Associate

Ernst & Young LLP

May 2015 - Aug 2017 (2 years 3 months)

Assisted in application penetration testing and network security assessments. Performed internal vulnerability assessments and assisted in phishing and Wi-Fi penetration testing engagements.

Application Security Testing Network Security Vulnerability Assessment Phishing Wi Fi Security