Dhairya Nagda

Experience

• 

  Yocket

  Apr 2020 - Jul 2020

  Web Development Intern

  - Managed the front-end and back-end of the official website of Yocket.- Learnt how to effectively process data at the backend and set up cron-jobs using PHP and MYSQL. - Made use of Bootstrap 4 to design web pages.

• 

  Northeastern University

  Aug 2021 - May 2022

  Residential Safety Office Proctor

  - Managing and regulating access control for residential buildings- Provide on-site support to residents

• 

  Apex Fintech Solutions

  Jun 2022 - Aug 2022

  Information Security Intern

  - Performed 3 detailed Vendor/Third Party Application reviews to verify security posture before integration- Optimized existing IR playbooks, resulting in a 20% reduction in the time required to successfully respond to incidents- Implemented processes and managed tools (InsightVM) used to identify vulnerabilities and track their remediation- Monitored and requested takedown of 17 falsely registered domains using Zerofox (Threat Intelligence Tool)- Aided in drafting, reviewing security policies, achieving 100% industry compliance pre-organization-wide enforcement Show less

• 

  Dyne Therapeutics

  Feb 2023 - Jul 2023

  Information Security Analyst Co-op

  - Enhanced security via a comprehensive risk assessment, streamlined processes, saving 10 hours/week in manual checks- Fortified access control through an audit of Active Directory and Okta for 205 users, rectifying 12 unauthorized accounts- Achieved a 30% decrease in critical vulnerabilities by analyzing weekly Nessus reports and prioritizing mitigation efforts- Ensured clinical process security by assessing overall risk through cross functional collaboration, delivering a final report with 2 major security flaws and recommended remediation efforts- Performed incident response procedures to effectively resolve 4 critical security incidents within 48 hours Show less

• 

  Cyber Defense and Intelligence Center

  Jan 2024 - Apr 2024

  Cyber Intelligence Analyst Volunteer

  - Performed Deep/Dark Web OSINT to gather evidence associated with ongoing investigations.- Utilized open source tools like Maltego, Google Dorks, Spiderfoot and Tor Browser in a secure environment to dive deep into the internet and excavate digital artifacts to assist field level cyber operations. - Developed detailed investigation reports highlighting the methodology followed and analysis of cyber artifacts obtained.

• 

  Commonwealth of Massachusetts

  Jan 2024 - now

  Security Analyst

  - Resolved security incidents using Cortex XDR, resulting in a significant decrease in incident resolution time.- Streamlined vulnerability remediation efforts for multiple executive agencies, simplified technical concepts and facilitated informed decision-making, ensuring timely resolution of critical vulnerabilities.- Automated regular delivery of customized vulnerability reports using Python, working with Tenable and Microsoft APIs.