VAMSI VARRA

Orchestrated end-to-end vulnerability assessments using Tenable and Qualys, identifying and driving remediation for critical issues across applications and infrastructure.

Conducted advanced web and API penetration testing, detecting and mitigating vulnerabilities including XSS, SQL Injection, insecure endpoints, and weak authentication.

Collaborated cross-functionally with DevOps and IT teams to analyze CVEs, prioritize risks, and implement remediation strategies aligned with OWASP Top 10 and SANS 25.

Maintained secure Linux environments and executed security configuration reviews for endpoints, servers, and network devices, ensuring compliance with security baselines and regulatory standards (ISO, NIST).

Authored and delivered clear, executive-level security reports to diverse stakeholders, significantly enhancing organizational visibility into security posture and informing strategic decisions.

Managed a comprehensive vulnerability management program, utilizing Qualys and Tenable for system scanning and coordinating remediation efforts with patch teams.

Developed and presented executive-level vulnerability reports, effectively communicating risk impact and strategic remediation plans to leadership.

Achieved over 90% server compliance by creating and enforcing robust security policies and procedures aligned with ISO 27001, strengthening the overall security framework.

Coordinated cross-functional teams to analyze and resolve vulnerabilities across cloud, server, and endpoint environments, improving system resilience and security posture.

Streamlined remediation timelines by prioritizing vulnerabilities based on criticality and business impact, enhancing incident response efficiency and reducing exposure.