Tirumala Reddy
Top-notch Security Consultant
Vulnerability Assessment
Penetration Testing
Professional Status
Freelancer
Available
About Me
• 15+ years’ experience in Information Technology field with expertise in Management.
• Project planning, resource planning, project schedule development and maintenance.
• Create and monitor project estimates and budget as required.
• Provide leadership to diagnose and overcome barriers to team/project progress.
• Execute implementation plan and monitor progress, perform project review and create summary document to include standard operating procedures.
• Define corporate information security strategies
• Manage resources in local & remote locations for project & day-to-day works.
• Lead researchers and development teams to implement projects.
• Dedicated, hardworking individual with the intercommunications skills to work at all levels of the organization
• Exceptional abilities in project design and management with the organizational and supervisory skills to assure success. Delegates and monitors work to meet and beat deadlines.
• Outstanding motivator and builder of teams. Works well in both team environments and individual assignments.
• Successful in meeting new technical challenges and finding solutions to meet the needs of the customer.
• ‘Hands-on’ IS and networking services expertise
• Maintain focus on achieving bottom-line results while formulating and implementing advanced technology and business solutions to meet a diversity of needs.
• Superior record of delivering simultaneous large-scale, mission-critical projects in time and under budget.
• Team-based management style and excellent interpersonal/communication skills
• Project planning, resource planning, project schedule development and maintenance.
• Create and monitor project estimates and budget as required.
• Provide leadership to diagnose and overcome barriers to team/project progress.
• Execute implementation plan and monitor progress, perform project review and create summary document to include standard operating procedures.
• Define corporate information security strategies
• Manage resources in local & remote locations for project & day-to-day works.
• Lead researchers and development teams to implement projects.
• Dedicated, hardworking individual with the intercommunications skills to work at all levels of the organization
• Exceptional abilities in project design and management with the organizational and supervisory skills to assure success. Delegates and monitors work to meet and beat deadlines.
• Outstanding motivator and builder of teams. Works well in both team environments and individual assignments.
• Successful in meeting new technical challenges and finding solutions to meet the needs of the customer.
• ‘Hands-on’ IS and networking services expertise
• Maintain focus on achieving bottom-line results while formulating and implementing advanced technology and business solutions to meet a diversity of needs.
• Superior record of delivering simultaneous large-scale, mission-critical projects in time and under budget.
• Team-based management style and excellent interpersonal/communication skills
Mathematics, Physics & Statistics
PenTester
Freelancer
Since December 2011
Muscat
Oman
- Planning and Enumeration
- Vulnerability Analysis
- Penetration Testing
Senior consultant (Network & Security)
Royal Court Affairs
Since December 2007
- Internal Consultant for RCA with over 20,000+ employees and over 80+ offices in Oman. Responsibility for all data and systems security, protecting over 100M records of Personally Identifiable information and proprietary corporate data.
- Project planning, resource planning, project schedule development and maintenance.
- Execute implementation plan and monitor progress, perform project review and create summary document to include standard operating procedures.
- Define corporate information security strategies
- Manage resources in local & remote locations for project & day-to-day works.
- Lead researchers and development teams to implement projects.
- Scan Networks, Servers, and other resources to validate compliance and security issues using numerous tools (see technical skills section).
- Established regular risk register reviews with DG’s and Directors of key business/operational segments while standardizing delegation of authority, reporting, and risk acceptance processes.
- Led deployment of web application firewall technology to protect mission-critical web infrastructure
- Led deployment of secure endpoint inspection for remote workforce.
- Authored corporate-wide network security policy.
- Formulated, published, implemented, and enforced corporate technology risk management methodology, encompassing all areas of technology and application development.
- Spearheaded use of TLS for encrypted delivery of corporate electronic mail across public networks.
- Design & implementing Microsoft AD, Exchange & TMG solutions, having experience on Lync, DPM & etc.
- Plan PT & VA tests for local networks
- Freelancer for few outside companies to improve my PT & VA skills & analyses my reports
Senior Enterprise Consultant (Projects Lead)
Macro Software Systems LLC
December 2004
to October 2007
- Plan, Design & Implement Infrastructure projects
- Migrate/upgrade legacy Microsoft infrastructure services to new version
- Manage resources at local & remote locations for project & day-to-day works.
- Manage projects using the Agile/Six Sigma PM methodology.
- Scan Networks, Servers and other resources for customers to validate compliance and security issues using numerous tools (see skills section).
- Guide/educate team members for better productivity
- Develop secure network architecture for new and existing environments.
- Assist developers in remediating issues with Security Assessments which exceed OSWASP standards.
- Performed application security auditing using CEH training to determine the vulnerability of applications.
- Create a customized Information System Security Assement Framework (ISSAF) for evaluating networks, and application security.
- Project executed with this company (More details available on these projects on request)
- o RCA - Yellow Project, RCA, Muscat
- o Invest bank, AD Project, Sharjah
- o KOJ, Infrastructure Design Project, Dubai
System, Network & Exchange Administrator
ING-Vysya Life
August 2002
to January 2004
- Infrastructure Management
System Administrator
Pharmed Medicare
January 2001
to August 2002
- Same job description as ING-Vysya Life Insurance
System Administrator
Andhra Pradesh Electronics Ltd
March 1997
to January 2001
- Desktop Management & Trainee
- Juniper firewall design, implementations, reporting and management using Juniper NSM, Juniper STRM
- Fortigate firewalls design, implementations, Central management & Reporting
- Proven IT Professional with Experience in Management
- IT Strategic Planning / Business Solutions / Team Leadership / Implementations / Project Management / Contract Negotiations / Vendor Relations /Penetration Testing / Vulnerability Assessment
-
Platforms: Windows, Linux & VMware
Technologies: Microsoft (AD, DNS, DHCP, Exchange, TMG, DPM, Hyper-V, Lync, Visio, Project, Windows & Office), VMware (ESX, ESXi, vSphere & vCenter), Linux (Red Hat, Ubuntu, Centos), Cisco (limited to my requirements), HP (Storage EVA 4000/6400, Blade/Rack Servers, Desktop, Local/Network Printers/ Scanners), IBM, Sun, Barracuda, FortiMail, Juniper (SRX, NSM & STRM), SQL, Oracle, Send mail, SNMP v1/v2/v2c, DNS, DDNS, DHCP, NetCool, Optivity, Satan, Saint, Radius (RAS), QIP, SSH, Veritas Backup Exec 2012, LDAP, Open NMS, Nagios, HP OpenView, Port Sentry and Security Scanning and Detection Tools, various Auditing and Penetration Testing tools, Agile Project Management, ITIL, ISO 20000/27001, HIPAA, SOX, PCI DSS, Identity Management, Metasploit, AppScan, OWASP, Backtrack, Penetration, Vulnerability, Reconnaissance, Scanning, Footprinting, Enumeration, Acunetix, NMAP, FISMA, NIST, Network & OS Security, web application security and etc…
Languages: C, C++, Shell scripting (bash, sh, csh, ksh)
- Swimming
- Reading
- Consulting
- Surfing
- Teaching
- Presentations
- Management or Security trainings
- New Techies
- Shopping
- travelling
- Bloging & watching Movies
