• Leading the cyber security team with four divisions for Application & infrastructure Security, Monitoring & Incident Response, & GRC.• Designing and implementing different control as per the need• to enhance the security posture & managing different technical controls.• Managing, analyzing and assessing the overall Risk of the infrastructure and Application environment.• Identify opportunities to improve risk posture, developing solutions for remediating or mitigating risks and assessing the residual risk• Anticipating and accessing potential impacts of changes in the infrastructure and application, by conducting in-depth investigations into all highlighted and potential areas of concern.• Perform focused risks assessments of existing or new services and technologies• Analyze and evaluate security threats and vulnerabilities and provide risk analysis with recommendations of the risk response.

main job role here is to ensure the security of the current ICS/SCADA infrastructure in different levels. To propose a Security Architecture for current SCADA sites running legacy SCADA infrastructure and to also ensure security posture of NWC Head Office and branches.JOB DESCRIPTION1. Designing, Deployment and administration of the Next Generation Firewall project for all the Kingdom wide NWC SCADA sites.2. SIEM IBM QRadar, IDS/IPS implementation and configuration.3.Advance malware protection solution FireEye NX series deployed.4. Design and implement data network security measures; operate Network Intrusion Detection and Firewalls; conduct performance analysis of Information Systems security incident5. Provides analysis and recommendations for the evolution and enhancement of the enterprise network security Vulnerability Assessment and Management.6. Operate Host Based Security System (HBSS), firewalls, Intrusion Prevention Systems, Intrusion Detection Systems, other point of presence security tools, Virtual Private Networks, and related security operations.7. Implement and monitor security measures for communication systems, networks, and provide advice that systems and personnel adhere to established security standards and Governmental requirements for security on these systems.8. Security Strategy Assessment and Management, Infrastructure & Operations Security and Risk Management, Privacy & Data Protection, Use and compliance with frameworks and regulations such as CobIT, NIST (800-53, cyber security), ISO, ITIL, OWASP.

1.Management,administration and planning of the overall voice and data networks daily operations of the Main datacenter and all the remote branches, as well as network performance and network security monitoring.2.Perform supervisory responsibilities in accordance with the current Al Majmaah University`s policies and assign duties and examine work for exactness, and conformance to policies and procedures.3.Interpret needs and oversee planning, installation, setup, support and documentation of network systems.Evaluate and recommend any Network design change or the upgrades as required. Coordinating with other departments in order to understand and meet their requirements.4.Financial planning and budgeting experience, Problem solving and project management experience and technical decisions in purchasing and maintaining networking equipment and infrastructure.Project Based Tasks Performed in AL-Majmaah University:1.More than a 2years Experience of Implementation, configuring and administration of IBM ISS GX5008 IPS and IBM ISS GX6116 IPS.2.Planning Designing & Implementing the layered design of the main datacenter with the core layer based on Nexus 7K segmented by VDC in to core and aggregation switch,implementation of the Nexus 5k in the datacenter for segregating the Server farm and giving dual connectivity.3.Overall plan design and implementation of routing and redundancy in the datacenter, using OSPF, HSRP, VPCs, etc.Designing datacenter security based on defense in depth technique deploying firewalls in different entry points, using the Cisco ASA 5585 as core firewall and Juniper SRX 650 as Internet Segment firewall.4.Implementing VSS based aggregation layer using 6509.5.Implementing Security in the Core Layer with Sonicwall 4500 firewall.6.Implementing top of the rack switches in the Server farm by using Nexus 2k as fabric extenders of Nexus 5k.7.Designing the overall Wireless network using cisco Access points and central wireless controllers.

1. Managing IP Network operations of Company, which includes Management, administration, troubleshooting, and monitoring and of Multi-Vendor Environment of Juniper Networks®, Cisco Systems®, Lucent-Alcatel®, Fortinet® and Patton®. 2. Administration of overall secure enterprise design of the NCCPL`s internal and external infrastructure serving more than 1000 nodes. 3. Management and troubleshooting of the Network applications, infrastructure installed at Data center. 4. Management, Configuration & Troubleshooting of all the Unified Threat Management Devices (FortiManaer, FortiAnalyzer, FortiGates1000A, 800,400,200, at all four sites spread all over Pakistan. 5. Management, Configuration & Troubleshooting of Cisco Router at all four sites in Pakistan. 6. Management, Configuration & Troubleshooting Juniper Routers at all four sites in Pakistan. 7. Management, Configuration & Troubleshooting of all the Patton Access Servers at all the four sites in Pakistan. 8. Management, Configuration & Troubleshooting of Alcatel WLAN Switches at all the four sites in Pakistan. 9. Management, Configuration & Troubleshooting of following Network Monitoring Systems (What’s Up Gold Network Monitoring System , Alcatel Network Monitoring System, Cacti Network Monitoring System & Yumix Network Monitoring System.). Project Based Tasks Performed in NCCPL: 1. Re-engineering of enterprise network designs to optimize and to ensure network security2. Configured Squid Proxy Server On various Internet Circuits at all site.3. Redesigning the overall OSPF design of all the branches.4. Configured NMS –What’s up Gold, & Cacti.5. MS Windows Administration:Installation and configuration of Microsoft Domain Controller With additional domain controller on server 2008R2.Implementing Microsoft exchange server 2010 on server 2k8R2.Implementation of Microsoft DHCP server on 2K8 R2.

1. Solving problems related to mails and web serves of our clients.2. To install and configure the biometric ATM machine and integrate it with the existing network of our clients and to further integrate the standard banking network protocols with our ATM which was based on Fedora Core 2 LINUX.3. To look after the future trouble shooting and maintenance of the Active directory and other domain related services services. 4. Installing configuring Linux based firewalls on various clients site and according to request also configured PIX firewall and VoIP in various machines as per the requirements of our clients.5. Monitoring system performance and system logs and applying policies to provide secure and stable services to clients.6. Implementing firewalls and other security tools and monitoring their performance.7. Creating backup and restoration policies to provide maximum uptime.8. Configuring and Managing Active Directory and Exchange server for various clients. 9. Creating mail accounts and applying quotas on Linux & Unix servers.10. Creating and modifying DNS records on Linux & Unix machines.11. Scheduled backups of system and user data on Linux, Unix and windows server.12. Analyzing logs and rotating logs to save disk space .13. Providing main client and others various clients service in Linux based machines and their Backups.14. Providing support for Sendmail, Apache, Squid, named and other Unix based services.15. Installation of Linux Debian & Redhat ,Using and programming Linux shell (bash).16. Disaster Recover site planning and BCP (Develop and execute DR plans for back Office services, Post Fix l, LDAP, DNS, Luster, Samba, AFS).17. Core Linux Service Implementations and support (DNS, Mail, Backup on HP open view, Apache, Samba, Backups, Luster server’s management).