Sapna Wadhwa-CEH,CHFI

DevOps Engineer

Toronto, Ontario, Canada9 yrs experience

Key Highlights

Expert in translating complex threat data into actionable intelligence.
Proven track record in threat hunting across multiple industries.
Skilled in collaboration and communication with technical teams.

Stackforce AI infers this person is a Cybersecurity expert specializing in Threat Intelligence and Threat Hunting.

Contact

Skills

Core Skills

Cyber Threat Intelligence (cti)Threat Hunting

Other Skills

AQLAnomaly DetectionAnti-spamCC++CEHCloud Threat HuntingComputer ForensicsComputer SecurityCore JavaCyber Threat Hunting (CTH)DFIRData AnalysisEDREthical Hacking

About

Cybersecurity professional specializing in Threat Intelligence, Threat Hunting, and Threat Modeling. Skilled in tools like ThreatConnect, Tanium, CrowdStrike, Proofpoint, EDR, XDR Zscaler and SIEM with capable of running effective SQL queries with a track record of turning complex threat data into clear, actionable intelligence for global organizations.

Experience

9 yrs

Total Experience

1 yr 9 mos

Average Tenure

Current Experience

Scotiabank

Lead Threat Hunt/Threat Intelligence Specialist

Jan 2023 – Present · 3 yrs 5 mos · Ontario, Canada · On-site

My work spans collecting and analyzing intelligence from internal case data, OSINT sources, partner feeds, and proprietary tools to spot emerging trends across the threat landscape.
I specialize in turning complex data into clear, high-impact reports—complete with statistical insights, visualizations, and executive-ready summaries—that empower both technical teams and decision-makers.
My focus areas include:
Threat Hunting & Modeling: Proactively detecting patterns, risks, and adversary behaviors across industries like finance, healthcare, and critical infrastructure.
Collaboration: Partnering with analysts, researchers, and incident responders to validate findings, streamline data collection, and share actionable intelligence.
Research Communication: Delivering outcomes through monthly briefings that bridge technical depth with strategic clarity.
ThreatConnect | Tanium | CrowdStrike | Proofpoint | Zscaler | OSINT frameworks | EDR | SIEM | Tenable
What drives me is the ability to translate threat data into meaningful intelligence that strengthens resilience, reduces risk, and helps organizations defend against sophisticated attacks.

Cyber Threat Intelligence (CTI)Cyber Threat Hunting (CTH)ManagementManaged Detection and Response (MDR)Incident ResponseDFIR+11

Deloitte canada

Threat Hunt Senior specialist

Sep 2021 – Jan 2023 · 1 yr 4 mos · Toronto, Ontario, Canada · On-site

Microsoft

Senior Threat Intelligence Analyst

Apr 2019 – Sep 2021 · 2 yrs 5 mos · Hyderabad, Telangana, India

Highly Enthusiastic and keen threat hunter for both mac and windows latest threats, then escalating evasions in multiple products to make sure we have coverage in place. Gained In-depth Knowledge of Virus total Hunting and clustering of latest malware families and mapped it with MITRE Techniques. Writing Threat Analytic Reports which describes the threat overview, analysis and prevention and the detections which are customer facing. Proactively reporting Latest techniques used by adversaries to evade detection and exploiting system vulnerabilities and to make sure to have coverage in place. Collaborate with different teams to improve our customer impact. Assisting teams to provide details of the threat as per the customer query.

Cyber Threat Intelligence (CTI)Threat AnalysisThreat Hunt

Wipro limited

Senior Project Engineer

Mar 2018 – Apr 2019 · 1 yr 1 mo · Gurgaon, India

Intel security

Security Researcher

Nov 2015 – Mar 2018 · 2 yrs 4 mos · Gurgaon, India

 Malware research/analysis/Forensics and reverse engineering(PE Files, JS Files, Pdf Files, Doc Files, OLE Files, Swf files)
 Spam Analysis and writing Generics on that.
 Analyzing and Writing generic detections based on the behavior and code characteristics for Top Malware Families like Locky, Gamarue, Petya, Nemucod etc.
 Responsible for vulnerability assessment of networks.
 Responsible for submitting reports for Malware analysis and VA of networks
 Blog Writing(Written various internal blogs on Malware Families)
 Incident Response

Sophos

Security Engineer

Nov 2014 – Oct 2015 · 11 mos · Ahmedabad Area, India

Certified Spam Fighter(Providing Anti-Spam solution of real-time spam protection over SMTP, POP3, IMAP protocols)
Spam Analysis: Analyzing Email Headers, Call to Action Domains and other parameters to Identify Spam Messages and blocking them with in our Spam Traps
Regular Expressions for Blocking the Spam Messages (Providing Generic Detection's)
Malware Analysis: Analyzing the PE Format for exe files.Looking at the Entry Point Code, API calls and Sections of PE.
Malware analysis (Reverse Engineering): Providing real-time detection for emerging viruses like Zbot, RaaS, Zero Day, Zeus, Upatre etc.

Confidential (in stealth mode)

Information Security Consultant

Jul 2012 – Oct 2014 · 2 yrs 3 mos · New Delhi Area, India

I worked as an Information Security Consultant.
Includes Ethical Hacking, Vulnerability Assesment, Owasp Top 10.
Apart from it worked as an Malware Analyst depending upon the project Requirement