Sandeep Atthuluri
Bengaluru
Summary
Cloud Security Engineer with over 7 years of experience building and securing scalable cloud environments across AWS, GCP, and Azure. Proven track record of designing automated governance workflows, implementing organization-wide policies, and driving threat detection and remediation at scale. Currently contributing to high-impact security automation and posture management initiatives at Palo Alto Networks. Adept at cross-functional collaboration, with strong technical leadership in infrastructure security, compliance readiness, and operational efficiency.
Overview
8
8
years of professional experience
Work History
Staff Security Engineer
Palo Alto Networks
12.2022 - Current
- Secured 1000+ GCP and Azure projects by implementing robust cloud posture management with Prisma Cloud and SCC.
- Designed and deployed organization-wide GCP Org Policies to ensure baseline compliance and prevent misconfigurations.
- Developed automated IAM approval workflows using GCP PAM, BigQuery, and Slack, enabling manager-based approvals with complete audit trails.
- Built and maintained auto-remediation playbooks using Cortex XSOAR, responding to IAM drift, open firewall rules, and misconfigurations.
- Integrated Slack-based actions, BigQuery logging, and escalation chains into XSOAR workflows for seamless and trackable remediation's.
- Built threat detection models in BigQuery, ingesting into Cortex XSIAM for centralized visibility and anomaly detection.
- Conducted periodic security reviews with development and infrastructure teams, aligning application posture with organizational standards.
- Reduced misconfigurations-related incidents by 30% through automated policy enforcement and Slack-based feedback loops.
- Developed automated detection rules for IAM and network misconfigurations across AWS, Azure, and GCP — covering excessive IAM privileges, open NSGs/Security Groups, and overly permissive NACLs — using Prisma Cloud, XSOAR, Cortex cloud
- Integrated Prisma Cloud IaC Scanning into Terraform repositories to enforce secure-by-design deployments and prevent noncompliant resources during CI/CD stages.
- Partnered with SOC and Incident Response teams to triage and contain cloud incidents using automated playbooks and native cloud services
Cloud Automation Engineer
Infor
01.2018 - Current
- Automated infrastructure provisioning using Terraform for reusable deployment across AWS and Azure environments.
- Led cross-account CI/CD deployments using AWS CodePipeline, IAM policies, and GitHub for streamlined secure releases.
- Designed and monitored secure infrastructure for web SaaS solutions using EC2, RDS, API Gateway, ELB, Route 53, and CloudFront.
- Integrated CloudCustodian to enforce real-time security compliance rules across AWS accounts.
- Deployed and secured Docker workloads using EKS and AKS with well-defined networking, role-based access control, and audit logging.
Security Engineer
HCL
05.2022 - 12.2022
- Implement and execute security policies across cloud environments using c7n tools.
- Creating shell scripts and python scripts for automating the scanning processes across the organizations.
- Developing CI/CD pipelines for deployment of scripts in phased manner using gitlab and code pipelines.
- Working with terraform modules to automate the infrastructure deployments.
- Conducted security audits to identify vulnerabilities.
Education
Master of Technology - Artificial Intelligence And Robotic
Andhra University
Visakapatnam12.2017
Bachelor of Technology - CSE
GMR Institute of Technchnology
Rajam04.2015
Skills
- Prisma Cloud
- AWS, GCP, Azure
- Git
- Python
- Docker
- Kubernetes
- Terraform
- BigQuery
- Microsoft Azure
- XSIAM
- XSOAR
- Jenkins
- Cloud architecture design
CORE COMPETENCIES
- Cloud Platforms: AWS, GCP, Azure
- Security Governance: Org Policy Management, IAM Governance, ABAC, SAML, OAuth, JWT
- Security Tools: Prisma Cloud, Cortex XSOAR, Cortex XSIAM, Security Command Center (SCC), GCP Security
- Infrastructure as Code: Terraform, CloudFormation, ARM Templates
- Automation & Scripting: Python, BigQuery, Slack APIs, Pub/Sub
- CI/CD & Configuration: GitHub Actions, Jenkins, Docker, Kubernetes
- Threat Detection & Response: GCP Security, SCC Findings, XSIAM Analytics
- Monitoring & Remediation: Auto-remediation Playbooks, XDR Agents, Slack-Integrated Alerting
- Cross-Functional Collaboration: Security Reviews with Engineering, Stakeholder Alignment, Training & Awareness
Timeline
Staff Security Engineer
Palo Alto Networks
12.2022 - Current
Security Engineer
HCL
05.2022 - 12.2022
Cloud Automation Engineer
Infor
01.2018 - Current
Master of Technology - Artificial Intelligence And Robotic
Andhra University
Bachelor of Technology - CSE
GMR Institute of Technchnology
Similar Profiles
Andrew SandovalAndrew Sandoval
Business Development Representative at Palo Alto NetworksBusiness Development Representative at Palo Alto Networks
Cody TaylorCody Taylor
Major Account Manager at Palo Alto NetworksMajor Account Manager at Palo Alto Networks
Bonney BhaikBonney Bhaik
Customer Success Engineer at Palo Alto NetworksCustomer Success Engineer at Palo Alto Networks
Sabir PashaSabir Pasha
Senior Technical Solutions Engineer at BARRACUDA NETWORKSSenior Technical Solutions Engineer at BARRACUDA NETWORKS
Vishnu Putri SVishnu Putri S
Secondary French Teacher at Ebenezer International SchoolSecondary French Teacher at Ebenezer International School