Paul Perumalla
Westmont
Summary
Vulnerability Management Engineer at First American Bank with expertise in risk assessment and automation scripting. Successfully led enterprise vulnerability initiatives, enhancing patch management efficiency and reducing critical vulnerabilities. Proficient in Ivanti and SIEM tools, fostering collaboration across teams to elevate cybersecurity compliance and incident response.
Overview
10
10
years of professional experience
1
1
Certification
Work History
Vulnerability Management Engineer
First American Bank
01.2019 - Current
- Lead enterprise vulnerability management efforts across endpoints, servers, and network infrastructure using Rapid7 InsightVM and Ivanti.
- Conducted regular vulnerability scans, analyzed CVEs, and prioritized remediation using CVSS scoring and risk-based frameworks to enhance overall security posture.
- Drive patch management lifecycle, improving remediation timelines and reducing critical vulnerabilities.
- Collaborate with IT, infrastructure, and application teams to track remediation and improve patching cadence.
- Integrate vulnerability data into Microsoft Sentinel SIEM, enabling real-time monitoring and alert correlation.
- Built dashboards and reports for leadership, highlighting risk posture, remediation status, and compliance metrics to facilitate informed decision-making.
- Manage asset discovery and vulnerability correlation using Lansweeper and Skybox.
- Support compliance initiatives aligned with NIST and security best practices, including audit preparation and reporting.
- Automate reporting and remediation tracking using PowerShell scripts, reducing manual effort and improving efficiency.
- Develop internal documentation and security procedures to improve incident response and security operations workflows.
- Communicated security risks and remediation guidance clearly to technical teams, leadership, and non-technical stakeholders.
- Monitored and investigated security alerts using Microsoft Sentinel SIEM and EDR tools, mapping threats to MITRE ATT&CK.
- Supported Azure and M365 environments, including identity management (Azure AD/Entra), MFA, Conditional Access, and access reviews.
- Performed threat intelligence analysis and produced security posture reports for leadership, including patching trends and risk prioritization.
Systems Analyst
Quest Diagnostics
Wooddale
03.2016 - 01.2019
- Supported enterprise IT infrastructure, ensuring reliability of servers, endpoints, and network services.
- Managed patch deployments and system updates across Windows environments, enhancing system security and stability.
- Provided helpdesk and desktop support, resolving hardware/software issues to increase user satisfaction.
- Deeply involved in conducting vulnerability scans, threat analysis, and responding to security incidents.
- Led the design and implementation of technical security solutions.
- Spearheaded the automation and improvement of technical processes, including vulnerability remediation and incident containment.
Education
Bachelor's Degree - Information Technology and Management
ILLINOIS INSTITUTE OF TECHNOLOGY
Chicago, ILSkills
- Vulnerability management
- Risk assessment
- Vulnerability scanning
- Patch management
- Security monitoring
- Cybersecurity compliance
- NIST
- PCI
- CIS
- FISMA
- HIPAA
- Ivanti
- SIEM
- Splunk
- QRadar
- Rapid7
- Automation scripting
- Python
- Database security
Certification
CompTIA Security+ Certification, 07/31/27
Technical Skills
Ivanti, Rapid7, Lansweeper, Splunk, SCCM, Palo Alto, Cortex, Bomgar, AWS IAM, Azure Security Center, GCP Security, PowerShell, Bash scripting, HIPAA, NIST 800-53, CIS Controls
Languages
- C++
- SQL
- Java
- Python
- Ansible
Timeline
Vulnerability Management Engineer
First American Bank
01.2019 - Current
Systems Analyst
Quest Diagnostics
03.2016 - 01.2019
Bachelor's Degree - Information Technology and Management
ILLINOIS INSTITUTE OF TECHNOLOGY