Abdul Ahad Email & Phone Number

Bengaluru, Karnataka, India

• Responsible for assessing, monitoring, and enhancing the security posture of critical infrastructure systems.• Collaborate with cross-functional teams to integrate security controls into infrastructure design and deployment processes.• Led incident response efforts to investigate and remediate security incidents• Conduct regular security and vulnerability assessments to identify weaknesses and prioritize remediation efforts.• Conduct cloud security assessments and risk assessments to identify security gaps and develop remediation plans.• Implement security controls and configurations in cloud platform to protect against unauthorized access, data breaches, and other security threats.• Manage email security gateway, including email filtering, anti-phishing, anti-malware, and data loss prevention (DLP) systems, to protect against email-based threats.• Conducted periodic security assessments and audits of email security controls and configurations to ensure compliance with industry standards and regulatory requirements.• Implement and administration of EDR solution, including deployment, configuration, and tuning to align with organizational security objectives.• Configured EDR platforms to optimize threat detection capabilities and reduce false positives.• Develop custom detection rules and queries to enhance the effectiveness of EDR platform in detecting advanced threats and malware.• Conduct in-depth analysis of endpoint telemetry data to identify indicators of compromise (IOCs) and anomalous behavior.• Coordinate incident response efforts during security incidents, including containment, investigation, and recovery activities.• Assist in the evaluation and selection of security products and technologies to meet organizational security needs and objectives.

Bengaluru, Karnataka, India

- Coordinate incident response efforts during security incidents- Led the team in implementing multiple Security Solutions like SIEM, EDR, FIM- Build process documents, SOPs, Runbooks etc.- Administration of multiple Security Solutions like SIEM, IPS EDR, Email Security Gateway- Identify process gaps and close them- Support audit and Compliance requirements PCI,SOC2- Integrate Open source Threat Intel platforms with SIEM and EDR to automate Incident Detection and Response- Identify vendor or Client reported vulnerabilities and resolve the same- Build Workflows for Incident Response and Orchestration- Partner with stakeholders to streamline, standardize and document vulnerability remediation procedures- Generate timely SecOps metrics and reports for management and stakeholders review

Bengaluru, Karnataka, India

• Manage SIEM infrastructure• Integrate devices with security tools• Investigate potential or actual security violations or incidents• Identify vulnerabilities, recommend corrective measures and ensure the adequacy of existing information security controls.• Provide real-time guidance on network configuration, security settings and policies, and attack mitigation procedures• Analyze network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths for each incident• Create policies, access, rules on SIEM, IPS• Document all activities during an incident and provide support with status updates during the life cycle of the incident• Provide evidences for audits from security perspective.• Monitor email security for spam and phishing emails• WAF monitoring for web security• Automated security incidents by integrating ticketing tool with SIEM

Bangalore

Information Security Engineer at [24]7• Monitoring of security related events and alert on multiple Security Tools such as McAfee SIEM, Cisco IPS• Thorough understanding of McAfee SIEM architecture • Creating and tracking security investigations to resolution.• Real Time Log monitoring/Packet analysis from different devices such as Firewalls, IPS, Proxy Servers, Windows Servers, System Application, Databases, Web Servers and Networking Devices.• Integrating and configuring devices such as server, firewall etc in McAfee SIEM• Involved in Cisco IPS (Source Fire) deployment• Track and update latest signatures and rules updates for SIEM and IPS• Upgrade SIEM and IPS to latest version as and when update gets released• Creating IOC's for latest malware and threats• OpenDNS monitoring for malware related traffics• Analyze Malware file for severity, threat score and its impact using Sand boxing• Provide evidences and reports from Security perspective during the Audits (PCI DSS, SOC2 etc)

Bengaluru Area, India

Information Security Admin at Xerox Corporation• Monitoring of security related events and alert on SIEM tool• Creating alarms/alerts on SIEM• Handle all end users, report Incidents, problem ticketing and change management ticketing with respect to Network Security within the agreed SLA.• Creating Reports from SIEM as and when required• Analysis of logs for security related events and updating all stake holders• Update relevant teams for latest vulnerability notification and track them for closure• Assessment of vulnerability and procedures to mitigate the same• Experience of working on multiple ticketing tools such as BMC Remedy, Isolve, Redmine• Follow-up with concerned teams to track the closure for any critical event/alert

Bengaluru Area, India

Desktop Engineer at Business Site (Honeywell, Bangalore)