• Performed Vulnerability assessment for different clients while using Nessus, Nmap, Wireshark, Qualys guard and other tools. Using Burp Suite as a main tool for manual testing.• Reviewed security architecture against security posture of the infrastructure to meet network security expectations align to defense in depth strategy. Mitigate network risk with the help of network controls such as access control lists, firewall, IDS, IPS, and Antivirus.• Developed information security policy… Show more • Performed Vulnerability assessment for different clients while using Nessus, Nmap, Wireshark, Qualys guard and other tools. Using Burp Suite as a main tool for manual testing.• Reviewed security architecture against security posture of the infrastructure to meet network security expectations align to defense in depth strategy. Mitigate network risk with the help of network controls such as access control lists, firewall, IDS, IPS, and Antivirus.• Developed information security policy aligned with NIST framework 800-53. Performed security controls gap assessment to comply with NIST framework.• Managed active directory for user provisioning and account management. Responsible for auditing the directory accounts monthly and share the gap with the infrastructure management team.• Good understanding of Splunk, NIST framework and ISO 27001.• Configured and managed Palo Alto Firewall, Iptables and AWS Cloud Firewall.• Assisted in the implementation of Qradar SIEM, improving incident response efficiency by 30%• Monitored and Managed Identity and Access Management (IAM) by using CyberArk.• Achieved a 25% improvement in alert generation performance for Varonis Data Security software.• Developed a vulnerability scanner policy in Nessus, enhancing result by 15%.• Orchestrated the use of MITRE ATT&CK framework, resulting in a 25% improvement in threat detection accuracy Show less

• Review the Cloud server’s security architecture against the security posture of the infrastructure to meet network security expectations and align to a defence-in-depth and zero-trust strategy. • Designed and implemented a secure cloud infrastructure on AWS, including VPC, IAM policies, and encrypted storage.• Conducted a thorough security assessment, identifying and mitigating risks using AWS security tools and best practices.• Created detailed documentation and runbooks for… Show more • Review the Cloud server’s security architecture against the security posture of the infrastructure to meet network security expectations and align to a defence-in-depth and zero-trust strategy. • Designed and implemented a secure cloud infrastructure on AWS, including VPC, IAM policies, and encrypted storage.• Conducted a thorough security assessment, identifying and mitigating risks using AWS security tools and best practices.• Created detailed documentation and runbooks for incident response and disaster recovery procedures.• Processed and analyzed monthly security event statistics, providing insights that led to a 10% reduction in incident response time.• Developed and maintained comprehensive process documentation, ensuring a 98% adherence to best practices.• Coordinated deep-dive security investigations, leading to the resolution of complex incidents in record time.• Maintained up-to-date knowledge of IT security industry trends, leading to a 20% increase in threat detection capabilities.• Ensuring 100% compliance in security operations by taking advantage of the CIS benchmark for secure configuration of the infrastructure, and NIST 800-53 for security controls.• Provided recommendations based on security alert analyses, resulting in a 10% improvement in risk management strategies.• Prioritize the vulnerability based on the severity and recommend the appropriate controls to mitigate the impact of the vulnerability exploitation. Show less

• Set up a web hosting environment using cPanel and WHM, configuring DNS, email services, and security settings.• Implemented SSL certificates and configured firewall rules to enhance the security of hosted websites.• Developed scripts to automate backups and security updates, ensuring high availability and resilience.• Provide technical support to clients for website and hosting issues.• Assist with website migrations, ensuring minimal downtime and data integrity during… Show more • Set up a web hosting environment using cPanel and WHM, configuring DNS, email services, and security settings.• Implemented SSL certificates and configured firewall rules to enhance the security of hosted websites.• Developed scripts to automate backups and security updates, ensuring high availability and resilience.• Provide technical support to clients for website and hosting issues.• Assist with website migrations, ensuring minimal downtime and data integrity during transfers.• Troubleshoot and resolve issues related to web hosting environments, such as server errors, performance issues, and security concerns.• Manage user access and permissions on hosting platforms and content management systems.• Managed domain registrations and configurations, including DNS settings. Ensured continuous operation of services like Apache, OpenLiteSpeed, FTP, SFTP, MySQL DB, firewall, backups, and more with zero downtime. Show less