Cloud Security Delivery Analyst
CurrentI am currently providing services for Client Black, focusing on conducting RSAC (Rapid Security Assessment Card). My work involves analyzing architecture diagrams and implementing security controls to ensure alignment with recognized frameworks such as NIST, CIS, and MITRE ATT&CK ID.My role includes evaluating and enhancing security practices, applying recommended controls to strengthen the overall security posture, while ensuring compliance with best practices and the client's specific needs.Blue Client: I was involved in a 3-phase project focused on enhancing security within the Google Cloud Platform (GCP):1. Designed security baselines for GCP services, ensuring alignment with best practices and compliance requirements. 2. Developed Windows and Linux scripts to automatically verify whether security controls were compliant or non-compliant. 3. Migrated the defined controls to Prisma Cloud, creating custom queries to detect and validate compliance status against the recommended GCP security baselines. This project covered strategic control definition, automation, and continuous monitoring, strengthening the client’s cloud security posture.