Ramakrishna Marella

: +91 9963190003
: [email protected]

Extensive experience in executing full life-cycle application development projects; ramping-up projects within time, budget &
quality parameter, targeting assignment with an organization of repute in IT industry Commented [RM1]: As I am inclined more towards technology,
something related to architect role suits here. Can you plz update
similar to below text ?
Soft Skill Profile Summary
“Application Security architect, Security Code reviewer (Security
Offering over 18 years of experience Static Analysis) along with extensive Java/J2EE development back
ground. Total 18 yrs experience with 8 yrs in Application Security
Impactful IT Professional with enriched knowledge of managing and 10 yrs in J2EE development projects.”
project management activities, project planning, design, scope
Motivator definition, estimation, resource administration, process management
and compliance with quality standards; ensuring project delivery
Collaborator within time, cost and quality specifications
Understanding the technical requirements of enterprise customers
Change
Agent Planner and work closely with the internal development teams to guide the
direction of our solution for our enterprise customer eco-system
Gained international exposure in development and testing projects for
a major mortgage insurance and healthcare companies in U.S
Skilled in working closely with delivery team to provide input on
industry trends for delivery offerings to meet the market needs;
expertise in conducting cloud release cycle with mobile application
Certifications Worked on several projects gathering experience across designing
& developing applications; testing & debugging code; designing
Certified OCP (Oracle Certified Professional interfaces; software automation
Java 7) in Jun'15 Strong leader & team player; excellent motivational skills to sustain
Certified CEH 7 (Certified Ethical Hacker) in forward growth momentum while motivating peak individual
Dec'11 performance from team members
An effective communicator with strong leadership, decision-making,
analytical and problem-solving skills

Core Competencies
SDLC IT Project/Program Lifecycle
Requirement Gathering / Analysis Management
Product Development Delivery/Release Management
Coding/Code Review Business Strategy & Execution
Bug Tracking/Debugging Process Enhancements
Core Leadership
Unit Testing Budgeting/Cost Optimization
Application Security IT Solution Design
Client Relationship Management Stakeholder Management

Technical Skills
Languages:Java
Web Technologies: HTML, JavaScript, XML
Specifications:J2EE (Servlets, EJB)
Frameworks: Struts, Spring, Hibernate
Tools/IDE:IBM Appscan, Fortify, Contrast, Burp, SD Elements, MS Threat Modeler, Eclipse, RAD, WSAD, Rational Rose, SQL
client
Application/Web servers: Websphere, Weblogic, Tomcat, JBoss
Database:Oracle, SQL Server
Professional Experience
May’16-Present with IBM as Application Security Consultant
Jun’11-May’16 with ADP Pvt. Ltd. as Application Security
Feb’01-May’11 with Infosys Technology as Technology Analyst

Key Result Areas: (Please Confirm)

Performing the necessary leadership, analysis and design tasks related to the development of an solution architecture
Leading a team of personnel and assisting them with the specifications for design, architecture, development standards,
best practices, coding styles & other development guidelines and conducting extensive functional & code reviews
Designing and maintaining all production and development environments, greatly improving application uptime for all
systems
Monitoring project progress and outstanding issues; ensured the quality & timeliness of the deliverables; reporting on the
project’s progress and escalating issues
Suggesting appropriate technology-based solutions for enhancing functional efficiency and achieving business excellence
Developing & maintaining healthy business relations with clients and ensured high customer satisfaction matrices by
achieving delivery & service quality norms
Delivering projects on time, building, mentoring test team and organization
Coordinating with management, clients & application developers about the business requirements and aids in developing
business process solutions
Devising project baselines; monitored and controlled projects with respect to resource deployment, time overruns &
quality compliance for ensuring its satisfactory execution
Administering resource allocations & setting up of the communication channels across the various horizons of
the organisation structure

Education
Master of Computer Applications from University of Hyderabad, Telangana in 2000
Bachelor of Science in Maths, Physics, Chemistry from Nagarjuna University, A.P in 1997

Personal Details
Date of Birth: Please Mention || Languages Known: Please Mention || Present Address: C-321, ARK Towers, Mayuri Nagar,
Miyapur, Hyderabad

Please find the Annexure for Project Details

 ANNEXURE
Projects Managed
Title: Threat Modeling, Secure Software Development Life Cycle
Designation: Application Security Consultant
Description: This project is about making client applications secure through secure design, Threat Modeling, Static code
analysis, Remediation
Technology:
Programming language: Java
Specification: J2EE
Frameworks: Spring, Hibernate
Tools: SD Elements, Appscan, MS ThreatModeler
Role:
Reviewing technical specification document of various applications
Getting security requirements from SD Elements tool
Developing threat modeling based on high level design
Proposing finalized security requirements from SDE tool and Threat Modeling
Creating static code analysis and provide remediation support to development team

Title: Security remediation

Designation: Application Security Consultant
Description: This project is about making client applications secure through remediation work, secure design etc.
Various applications of client undergo security testing both dynamic (Whitehat testing) and static (using Fortify tool)
way. As a result, the reported security vulnerabilities need be remediated which is done as part of this assignment. Also,
providing threat modelling to make applications secure enough.
Technology:
Programming language: Java
Specification: J2EE
Frameworks: Struts, Spring, Hibernate
Tools: Eclipse, RAD, Fortify
Role:
Obtaining security vulnerabilities from onsite and assign to team based on availability
Tracking status of on-going remediation work
Assisting team members technically in remediation work
Performing code review, test case review
Providing various reports (No. of issues closed, velocity of closed vulnerabilities) to senior management whenever
required
Imparting secure design principles, secure standards in various phases of project life cycle

Title: Static Analysis Work (Security Code Review)

Designation: Consultant
Description: Perform static analysis of various ADP applications in security perspective. Primary task as part of static
analysis would be to build the given application code, scan the code using Appscan tool, review the findings reported by
the tool and finally do manual review. Check all security issues and then report confirmed security vulnerabilities (SQL
Injection, Cross site scripting etc) to respective application team by suggesting remediation fixes.
Do a review again once application team comes with code fix for security issues.
Technology:
Programming language: Java
Specification: J2EE
Frameworks: Struts, Spring, Hibernate
Tools: Eclipse, Appscan

Title: Provide Support To Different Issues Raised by Application Teams for A Leading Health Care client in US
Designation: Project Manager
Description: The project is about providing support for issues raised by different application teams through tickets and
resolve them in given time period.

Title: Implement Collections and Payouts System For A Major Insurance provider in India
Designation: Technical Manager
Description: Objective of this project is to build a “Collections and Payouts Management Systems” for the client. This
application is interlinked to current system “Life Asia” and will provide features like – automation of Pre-Receipting,
Payout process, reconciliation, vendor management.
Technology:
Programming language: Java
Specification:J2EE
Framework: Spring
Tools: WSAD(WebSphere Application Developer), Rational Rose
Database: Mainframe DB2

Title: Funds Transaction Management for a Leading Health Insurance client in U.S
Designation: Technology Analyst
Description: The project is about reconciliation of Bulk Funding Files that are received from the Plan Sponsor as part of
contributions for HSA account. The contribution files received from Plan Sponsor will be validated and a new fund
request file will be generated by FTM that is to bank for credit/debit transactions into HSA account. The contributions
will be reconciled in FTM system after getting response file from bank.
Technology:
Programming language: Java
OS: UNIX and Windows
Tools: WSAD(WebSphere Application Developer), Rational Rose
Version control: ClearCase
Database: Mainframe DB2

Title: Testing of Legacy Application for A Mortgage Insurance Company in U.S

Designation: Technology Analyst
Description: As, some of the programs in legacy application are getting decommissioned, there is a need to re-test the
functionality of RPL programs to verify correctness of application. Analyzed RPL programs to be decommissioned,
prepared test scripts with help of offshore team, executed test scripts and gave a report to client.
Technology:
Programming language: RPL
Database: DB2

Title: Developing Claims Management System for a Mortgage Insurance Company in U.S
Designation: Technology Analyst
Description: The vision for “Claims” system is to re-model existing legacy insurance claims systems to support future
business goals of client. The new system will support current and planned products for both Primary and Secondary
coverage business, as well as US and International business. This new system facilitates in automated claim settlement
process, better integration with the PeopleSoft system to provide for greater accuracy of data and automated
reconciliation between client’s Claims System and Accounting System.
Technology:
Programming language: Java
Specification: J2EE
OS: Windows and UNIX
Specification: EJB and J2EE
Web: JSP, javaScript, HTML
Framework: Struts
Tool: WSAD, Rational Rose
Databas: DB2

Title: Developing Online Certification Tracker Application for a Leading Manufacturing Company in U.S
Designation: Developer
Description: Tech Tracker System is an online application for maintaining certified exams conducted throughout the
world. The application has mainly 2 modules : Registration and Admin. The Registration module is the one through
which the users can do the things like registering for the exams, checking for the exam results, the exams passed till the
date etc. The Admin part contains different types of admin roles : Manage Exam, Manage Certification, Manage Exam
Technology:
Programming language: Java
OS : UNIX
Tool: WebObjects 5.0