Bala Subrahmanyam Mallepudi

Demonstrated technical proficiency in administering and securing Windows and Unix/Linux operating systems, applying industry best practices for hardening and ensuring robust security configurations.

• Experience with enterprise-class firewalls, including the configuration of access control policies and continuous monitoring of network traffic to detect and prevent potential security threats.
• Monitored computer virus reports to determine when to update virus protection systems.
• Recommend improvements in security systems and procedures.
• Skilled in conducting packet-level analysis and leveraging network traffic data to identify suspicious activities, potential security breaches, and anomalies within the network.
• Proficient in utilizing encryption protocols (TLS/SSL, IPsec, SSH, PGP) and communication protocols (VLAN, LLDP, LACP, ARP, 802.1x, DNS) to establish secure and encrypted communication channels.
• Expertise in using Security Information and Event Management (SIEM) tools to collect, correlate, and analyze log data, enabling proactive identification of cyber trends and development of actionable insights for enhancing the organization's security posture.
• Assisting in the design and implementation of security controls, including access management, authorization processes, and periodic system audits to ensure compliance with security policies and industry regulations.
• Experienced in participating in the containment and neutralization of cyber threats based on gathered intelligence and indicators of compromise. Assessing the extent of damage to services, systems, networks, and data and contributing to the restoration and reconstitution of affected assets.
• Proficiently managing, monitoring, and analyzing various security technologies, including defensive and offensive solutions (e.g., firewalls, intrusion detection/prevention systems, data loss prevention), to maintain a robust security posture across both perimeter and internal networks.
  

• Develop and maintain a thorough understanding of the bank's technical infrastructure, including network topology, application architecture, and data relationships, to design and implement robust security solutions
• Work closely with IBM's cybersecurity team to ensure Scotia Bank's security infrastructure is aligned with IBM's best practices and recommendations and implement IBM's cybersecurity solutions as needed
• Utilize IBM QRadar SIEM to monitor and analyze security incidents, correlate security events, and perform network traffic and user behavior analytics to detect anomalies
• Apply security patches, upgrades, and conduct regular maintenance on IBM security products to ensure their optimal performance and to secure Scotia Bank's IT infrastructure
• Collaborate with IBM's research team to stay updated on the latest cybersecurity threats and trends, ensuring Scotia Bank's security measures are current and effective
• Provide expert advice and assistance to Scotia Bank's IT team during the planning and implementation of any IBM technologies, ensuring they are securely integrated into the existing systems
• Implement and manage IBM Security Identity Manager at Scotia Bank to streamline identity management and ensure only authorized users have access to the bank's critical resources
• Regularly conduct system audits using IBM Security QRadar Vulnerability Manager to identify and remediate any potential vulnerabilities in the bank's IT infrastructure
• Work with IBM and Scotia Bank teams to develop and implement a disaster recovery plan using IBM Resiliency Services, ensuring minimal disruption in case of a security incident
• Leverage IBM's incident tracking and ticketing systems for efficient task management, prioritization, and documenting actions and resolutions, ensuring a swift and effective response to any security incident.
• Provided secondary training to personnel struggling with technological tools and systems.
• Monitored ongoing technical compliance with applicable laws and regulations.