UDAY SAI RAM MADALA

• Led IAM operations (RBAC, MFA, PAM, SSO) and strengthened access controls across enterprise environment while enforcing least privilege principles
• Automated user access workflows using SQL queries and Microsoft Access modules, reducing manual provisioning errors
• Drove HIPAA, PCI-DSS, and ISO 27001 compliance through audits, risk assessments, and vulnerability scans
• Managed SIEM monitoring, incident response, and threat intelligence analysis using MITRE ATT&CK and Cyber Kill Chain frameworks
• Secured firewalls, VPNs, IDS/IPS, and AWS IAM by implementing Zero Trust principles
• Conducted phishing simulations and employee security training, resulting in measurable reduction in successful phishing attempts
• Implemented Disaster Recovery Plan (DRP) and Business Continuity Plan (BCP), enhancing data resilience
• Strengthened endpoint security by deploying EDR solutions, performing system hardening, and analyzing threat patterns to counter advanced persistent threats

• Performed real-time security monitoring and incident response using Splunk and ArcSight, significantly reducing detection times
• Investigated security threats and collaborated with IT and DevOps teams to remediate vulnerabilities across multiple systems
• Embedded security controls into CI/CD pipelines, enhancing secure software development lifecycle (SDLC) practices
• Automated incident response playbooks for faster threat remediation and response execution
• Created executive-level dashboards and reports tracking threat trends and key security metrics to support leadership decision-making

• Administered network infrastructure, ensuring optimal performance and reliability.
• Implemented system updates and patches, enhancing security protocols.
• Monitored system performance, identifying and resolving issues proactively.
• Assisted in managing user accounts and access permissions for compliance.

• Monitored security events via Splunk and QRadar, reducing incident response times and improving overall detection effectiveness
• Performed vulnerability assessments using Nessus and OpenVAS across 200+ endpoints, accelerating remediation timelines
• Supported compliance with PCI-DSS, NIST, ISO 27001, and GDPR standards through comprehensive audit and risk assessment programs
• Delivered employee security training and awareness programs, helping reduce successful phishing incidents
• Enhanced security posture by developing and implementing updated security policies and secure server/cloud configurations
• Directed monthly vulnerability scans and reporting for compliance adherence with industry standards and organizational KPIs

GPA: 3.97

GPA: 3.0