Ammad Butt Email & Phone Number

Berlin, De

Wolfsburg, Lower Saxony, De

• Implementing robust security operations in Azure, ensuring compliance with industry standards and enhancing cloud infrastructure protection• Developed and automated detection engineering processes as code, enabling rapid deployment and continuous improvement of security monitoring• Established security logging and monitoring best practices, optimizing threat detection and incident response capabilities across systems• Designed and implemented a comprehensive incident response procedure, improving organizational readiness and minimizing the impact of security incidents• Conducted in-depth evaluation of Cloud Security Posture Management (CSPM) tools, aligning their capabilities with specific organizational use cases to enhance cloud security

Berlin, De

• Contributed to the establishment of a robust cloud security program • Implemented threat detection leveraging AWS native tools such as GuardDuty, SecurityHub• Implementation of centralized logging and monitoring for AWS cloud infrastructure• Implementation of Cloud Security Posture Management (CSPM tool) for AWS Cloud Infrastructure• Support in setting up strategies for AWS Backup and data protection• Secure Architect Reviews to promote secure by design principles • Establishing Incident management and response process• Securing Infrastructure with shift left approach• Establishing security operations (SecOps) for the InfoSec team• Deployment and management of Infrastructure using IaC (Terraform)• Project planning for InfoSec initiatives and projects• Other projects and initiatives i.e SIEM, vulnerability management, vendor assessment

Amsterdam, Nl

• Perform Security Architecture Reviews and Threat Modeling of Cloud Services• Delivery and PoC of Security Projects i.e Vulnerability Management, Kubernetes Security and Cloud Native security tools• Vulnerability Assessment of infrastructure using Nessus and Lacework • Working with Cloud Native tools including AWS GuardDuty• Securing Multi-Cloud environments with common security frameworks• Security event monitoring of Infrastructure changes and log analysis• Creating rules on Splunk and log alerts in Loggly for threat detection• Performing Incident Investigation and Response• Cloud Security and posture management of multi-cloud environment• Kubernetes security and best practices• Technical assistance in internal and external audits for ISO and SOC 2• Team planning and defining procedures for Infrastructure Security team• Scripting on need basis with Python for automation

Hamilton, Bermuda, Bm

• Working as Level 2 Security Engineer • Incident Investigation and Response• Security Monitoring and Log Analysis on IBM QRadar• Monitoring and Reporting on Symantec Endpoint Protection and Sophos Central• Vulnerability Assessment and Remediation using Rapid7 InsightVM• Monitoring and Configuration review on F5 BIG-IP Advance WAF• Security Assessment and Configuration review of on premises and cloud infrastructure (AWS)• Architecture and Design Review to ensure Security controls and to meet compliance requirements• Coordination with 3rd Party vendors for Security Assessment and Penetration Testing.• Monitoring network traffic with Firewall Analyzer to ensure compliance with Security Policy and to review Firewall Change request.• RnD and PoC on new/existing tools to enhance functionalities and visibility of security posture.• Establishing policies and processes with cross functional team to improve Security Operations.• Documenting SOPs / Procedures and maintaining Trackers/Evidence.• Technical assistance during external Audits including PCI-DSS and ISO Audits.

British Virgin Islands, Vg

• Managing McAfee ESM (SIEM) i.e Adding Data Sources, Alarms, Alerts and Tuning rules.• Performing Vulnerability Assessment using Rapid7 Nexpose.• Policy review and update on KasperSky Endpoint Security.• Security Review of Network Firewall and Cloudflare (WAF).• Threat Modeling and Risk Assessment (Desktop Applications and SDKs).• Static Source Code Analysis (Automated Tools)• Application Security Testing and validating reported bugs from BugCrowd.• Secure Network Designs for on premises and cloud infrastructure. • On demand security review of AWS, BitBucket, Customer Support portals and network devices.• Managing Identify Management System (OKTA)• User awareness trainings and sessions with different teams.• Coordinating with DevOps and Backend team for security review and secure software development practices.

Master Of Science - Ms, Information Security

Bachelor'S Degree, Computer Science