Open to opportunities

Mounica Malreddy

@mounicamalreddy

Message

I build multi-cloud Zero Trust, DevSecOps, and GRC security programs for global enterprise environments.

India

Message

What I'm looking for

I'm looking to lead enterprise security transformation across multi-cloud environments, advancing Zero Trust, DevSecOps, GRC, and risk-driven security programs with engineering and business stakeholders.

At ANZ Operations & Technology, I partner with engineering, product, and infrastructure teams to embed secure-by-design practices across enterprise initiatives. I build and govern multi-cloud security architectures on AWS and Azure, with control baselines mapped to ISO 27001, NIST 800-53, PCI DSS, and GDPR.

I’ve implemented Zero Trust and identity-centric security through IAM, RBAC, MFA, PAM, DLP, and Zscaler ZPA/ZIA. I also integrated SAST, DAST, IAST, and policy-as-code into CI/CD pipelines for more than 100 applications.

Previously at First Advantage, I assessed Azure workloads, CDN infrastructure, and Zscaler environments, strengthening remote and internal access through Zero Trust-aligned controls. I supported GDPR control mapping, audits, remediation tracking, and evidence packages while improving security visibility and incident response.

Across Conduent, FIS, Infosys, Mindtree, and HCL Technologies, I’ve designed application, cloud, network, and perimeter security solutions. My work spans threat modeling, incident and vulnerability management, firewalls, WAF, IPS, encryption, SIEM, compliance, and mentoring security teams.

Experience

Work history, roles, and key accomplishments

Current

Security Partner

Current

ANZ Operations & Technology

Drove strategic security leadership as a trusted partner to engineering, product, and infrastructure teams, embedding secure-by-design practices across large-scale enterprise initiatives. Built and governed scalable multi-cloud security architectures on AWS and Azure, establishing cloud security operating models and control baselines mapped to ISO 27001, NIST 800-53, PCI DSS, and GDPR.

AWS Azure Zero Trust IAM RBAC MFA PAM DLP Zscaler DevSecOps SAST DAST IAST Policy as Code CI CD Threat Modeling Risk Assessment SIEM Incident Response Vulnerability Management ISO 27001 NIST 800 53 PCI DSS GDPR

Global Security Architect

First Advantage

Mar 2020 - Jul 2021 (1 year 4 months)

Directed end-to-end security architecture assessments for Azure workloads, CDN infrastructure, and Zscaler (ZIA/ZPA), identifying control weaknesses and implementing Zero Trust–aligned solutions. Deployed and fine-tuned DLP and Zscaler integrations with SIEM platforms, enhancing threat prevention and incident detection.

Azure Zscaler Zero Trust DLP SIEM GDPR Risk Management Compliance Security Architecture

Assistant Manager - Information Security

Fidelity Information Services (FIS)

Mar 2016 - Mar 2018 (2 years)

Managed vulnerability management and conducted continuous risk assessments. Led incident response for production systems, addressing zero-day threats, network vulnerabilities, and endpoint protection alerts to contain lateral movement and reduce potential business impact.

Vulnerability Management Risk Assessment Incident Response Network Security Endpoint Protection Firewalls IPS Encryption

Technology Analyst

Infosys Ltd.

Dec 2014 - Mar 2016 (1 year 3 months)

Managed network security operations including Cisco ASA firewalls, VPNs, IPS, WAF, and endpoint protection integrations for comprehensive perimeter and host-level defense. Ensured high availability and quick incident resolution for enterprise clients.

Cisco ASA VPN IPS WAF Endpoint Protection Network Security Incident resolution

Senior Engineer

Mindtree Ltd.

Jun 2014 - Dec 2014 (6 months)

Designed and implemented network security solutions using Cisco ASA, IPS, and WAF. Supported enterprise deployments and client solution demonstrations.

Cisco ASA IPS WAF Network Security

Senior Analyst

HCL Technologies Ltd.

Jun 2011 - Apr 2014 (2 years 10 months)

Managed enterprise firewall and network security solutions across Juniper, Cisco, Checkpoint, and coordinated endpoint protection policies to maintain consistent security controls. Conducted packet-level analysis and troubleshooting using Wireshark and TCPDump.

Juniper Cisco Checkpoint Firewalls Network Security Endpoint Protection Wireshark Tcpdump

Security Architect

Conduent Business Services

Feb 2020 - Present (6 years 7 months)

Designed enterprise and application security architectures aligned with PCI DSS, HIPAA, NIST, and ISO. Implemented data security and encryption programs including key management and classification, and led system hardening and compliance initiatives.