Nikhil tyagi

Senior Cybersecurity Analyst

New Delhi, India 2+ yrs exp 85 · Excellent

About

Cybersecurity professional with around 2 years of hands-on experience across Cloud and Network Security, specializing in GCP, AWS, and Azure environments. Proven expertise in Cloud Security Posture Management, Organization Policy Review, Network Architecture Assessment, and Cost Optimization through automation and intelligent resource management. Experienced in managing hybrid cloud operations and leading network and cloud projects to enhance organizational security posture. Skilled in Cloud Vulnerability Assessment, Penetration Testing across multi-cloud ecosystems. Passionate about integrating AI-driven security solutions to strengthen threat detection, response, and compliance alignment. Actively contributed as a trainer, conducting cybersecurity and cloud workshops for interns to foster technical growth and awareness. Collaborated with clients across financial services, healthcare, e-commerce, real estate, and government sectors, ensuring adherence to global standards such as PCI DSS, ISO 27001. Dedicated to building secure, resilient, and efficient enterprise cloud infrastructures.

Skills & Expertise (29)

Cloud Security Posture Management Advanced

8.5/10

Years Exp

GCP Advanced

8.0/10

Years Exp

AWS Advanced

8.0/10

Years Exp

Azure Advanced

8.0/10

Years Exp

Penetration Testing Intermediate

7.5/10

Years Exp

Threat Detection & Monitoring Intermediate

7.5/10

Years Exp

Network Security Intermediate

7.5/10

Years Exp

Identity & Access Management Intermediate

7.0/10

Years Exp

Cybersecurity Awareness Intermediate

6.5/10

Years Exp

Active Directory API Penetration Testing Exploit Development VAPT Zero Trust Architecture Network Segmentation Data loss prevention Burp Suite Data Privacy Risk communication Vulnerability Management Network Penetration Testing Metasploit Nmap Mobile Forensics Vulnerability Assessment ISO 27001 PCI DSS Cost Optimization Cloud Security

Work Experience

Sr. Cybersecurity Analyst

networkintelligence.ai

Aug 2024 - Present

Hands-on experience in Cloud Security Posture Management (CSPM) and Cloud Security Penetration Testing across AWS, GCP, and Azure environments. Performed cloud configuration audits to identify and remediate ideal vs. non-ideal resource utilization across AWS accounts. Conducted GCP and AWS Organization Policy and Service Control Policy (SCP) reviews to strengthen governance and compliance. Led 24×7 monitoring of cloud resources, proactively detecting misconfigurations, optimizing response workflows, and improving overall cloud resilience. Executed cost optimization reviews and management strategies, achieving measurable reductions in unnecessary cloud spend. Managed Azure Infrastructure and AWS IAM provisioning/deprovisioning, ensuring secure access control and policy consistency across hybrid environments. Integrated Microsoft Active Directory (AD) with AWS to streamline authentication and user management. Oversaw hybrid cloud infrastructure and maintained a comprehensive asset inventory across Azure and AWS. Successfully migrated AWS users and workloads from Azure to AWS, ensuring secure data transfers and post-migration validation to maintain integrity and compliance. Maintained Azure infrastructure security, conducting multiple test cases to validate control effectiveness and adherence to industry standards. Designed and deployed organization-wide SCP tagging architectures, automated enforcement using AWS CLI, and developed secondary IAM-based tagging policies for enhanced control. Collaborated with the Managed Detection and Response (MDR) team to enhance CloudTrail and CloudWatch architectures, optimizing visibility and significantly reducing operational costs. Conducted comprehensive network architecture reviews and vulnerability assessments for internal and external environments using tools such as Nessus, Nmap, Nuclei, Nikto, and SSH-Audit. Identified security gaps, prioritized risks based on impact and exploitability, and provided actionable remediation strategies to strengthen overall network defense. Performed internal and external penetration testing, including web application and business-logic testing, using Burp Suite, DirBuster, Hydra, and custom exploit techniques. Simulated real-world attack scenarios, conducted vulnerability research and exploit development, and validated security controls to assess organizational resilience. Conduct Network Segmentation checked reachability and Port Discovery scans, validation and firewall port changes verification.

Cyber Security Intern

Gurugram Police (Haryana Police)

Jun 2024 - Jul 2024

Conducted in-depth research on the role of mobile forensics in cybercrime investigation, focusing on evidence extraction, chain of custody, and data preservation methodologies. Collaborated directly with Dr. Rakshit Tandon and the Gurugram Police Cyber Community, contributing to real-world investigative case studies and awareness initiatives. Authored a comprehensive research report approved by Gurugram Cyber Police, titled 'The Role of Mobile Forensics in Crime Investigation.'

Penetration Tester Intern

Let’s We Hack (Cyber Security)

Apr 2024 - Jun 2024

Gained practical, hands-on cybersecurity experience by solving Capture the Flag (CTF) challenges and conducting penetration tests on Vulnhub and Matrix machines. Identified and exploited system vulnerabilities, conducted post-exploitation analysis, and documented findings following professional OSCP-style reporting standards. Utilized tools such as Burp Suite, Nmap, and Metasploit to investigate hidden passwords, analyze network vulnerabilities, and generate detailed penetration testing reports.