Arif Mo Email & Phone Number

Gurnee, Illinois, United States

• Worked on Threat Platforms providing Security information and recommendations on latest emerging threats & Vulnerabilities. Reported on customer data from Customer security appliances and SIEM to identify risks on AWS & Azure cloud-based accounts.• Design and develop integration and automation between the organization’s cyber security departmental tooling and software suites that maintain platforms.• Customize dashboard creation on SIEM for UBA, cisco, Checkpoint and Palo alto firewalls, switches, routers, legacy servers in Splunk, QRadar, MSS• Onboard devices into SIEM (Splunk and QRadar) for log monitoring.• Leverage Skybox Research Lab's vulnerability and threat intelligence, and automatically correlate it to your unique environment. • With SKYBOX we have modified network modeling and advanced simulations, pinpoint exposed vulnerabilities and other attack vectors. • Integrated SKYBOX context to prioritize vulnerabilities in terms of actual risk and respond to threats with accuracy and efficiency.• Did assessment on the most comprehensive list of firewall vendors, complex rulesets, even virtual and cloud-based firewalls. • Did evaluation on skybox with proven scalability in 1,500 ACL firewall rules sets and within Firewall Assurance keeps rules optimized and ensures changes don’t introduce new risk.• Worked on SKYHIGH CASB solution for monitoring cloud traffic.• Integrated SKYBOX to multiple SIEM automations.• Functioned as primary focal point for customer regarding vulnerability scanning (Qualys), reviewing results, organizing findings into spreadsheet, facilitating recurring calls to disseminate and prioritize findings, providing recommendations to mitigate, and continuing to follow-up.• Create NIST 800-53,800-53A,37 running compliance-based access controls.• Create and modify custom cyber security tools and engage in new cyber security tool development for internal cyber security departmental discretion and use.

Houston, Tx

• Analyze and review data from SIEM - QRadar for suspicious activity and trigger alerts to the concerned teams and applying rules and Building Blocks to SIEM.• Involved in leading Security Incident Response Team (SIRT).• SIEM integration with Nexpose and Qualys.• Dedicated security monitoring and analysis of cyber security events (Triage) of tracking phishing URLs, and emails and deep dug investigations.• Designed architecture layout For VPN Integration with Ping Identity for Multifactor Authentication with Ping Identity Products.• Integration of different devices/applications/databases/ operating systems with QRadar SIEM.• For configuration required to integrate PingID Multi-Factor authentication (MFA) into your VPN or remote access system.• Monitor security alerts from IBM QRadar and report any issues to the concerned team.• Monitor and analyze data feeds of events and logs from firewalls, routers, and other network devices or host systems for security violations and identify vulnerabilities-Qualys.• Conducted SAST and DAST with tools like HP Fortify, IBM Appscan, Web inspects, Nmap, Nessus, Qualys.• Analyzed the Exploited systems with vulnerabilities using Metasploit framework.• Static and dynamic scanning of various applications using HP Fortify and HP Web inspect, identify false positives and reports it to SOC.• Configure and install McAfee IPS sensors, and Cisco ASA with Firepower Appliances.• Troubleshot and resolved client communication problems, and firewall and McAfee IPS blocking problems.• Implemented and maintained McAfee Endpoint Encryption system to protect computers.• Advanced threat detection, Antivirus, MacAfee IDS/IPS rule sets and signature creation, packet analysis.• Coordinate with subject matter experts to resolve any security incidents and correlate threat assessment data as needed.• Support in the detection, understanding and resolving information security incidents affecting information systems & the business.

New York City Metropolitan Area

• Analyze and review data from SIEM - QRadar for suspicious activity and trigger alerts to the concerned teams and applying rules and Building Blocks to SIEM.• Involved in leading Security Incident Response Team (SIRT).• SIEM integration with Qualys.• Dedicated security monitoring and analysis of cyber security events (Triage) of tracking phishing URLs, and emails and deep dug investigations.• Designed architecture layout For VPN Integration with Ping Identity for Multifactor Authentication with Ping Identity Products.• Integration of different devices/applications/databases/ operating systems with QRadar SIEM• Ran ad-Hoc scans using Qualys vulnerability scanner.• For configuration required to integrate PingID Multi-Factor authentication (MFA) into your VPN or remote access system• Monitor security alerts from IBM QRadar and report any issues to the concerned team.• Monitor and analyze data feeds of events and logs from firewalls, routers, and other network devices or host systems for security violations and identify vulnerabilities.• Conducted SAST and DAST with tools like HP Fortify, IBM Appscan, Web-inspect, Nmap, Nessus.• Analyzed the Exploited systems with vulnerabilities using Metasploit framework.• Static and dynamic scanning of various applications using HP Fortify and HP Web inspect, identify false positives and reports it to SOC.• Configure and install McAfee IPS sensors, and Cisco ASA with Firepower Appliances• Troubleshot and resolved client communication problems, and firewall and McAfee IPS blocking problems.• Implemented and maintained McAfee Endpoint Encryption system to protect computers.• Advanced threat detection, Antivirus, MacAfee IDS/IPS rule sets and signature creation, packet analysis• Coordinate with subject matter experts to resolve any security incidents and correlate threat assessment data as needed.• Support in the detection, understanding and resolving information security incidents affecting information systems.

Silver Sprigs Md

Analyze and review data from SIEM – QRadar, Splunk for suspicious activity and trigger alerts to the concerned teams.• Integrated Vulnerability scanning tool Qualys into QRadar, Splunk.• Troubleshoot and researched security incidents based on QRadar, Splunk Network Flow and Log Activity.• Analysis of multiple log sources including firewalls, routers, switches, web servers and multiple networking devices.• Responsible for assisting with deployment of network infrastructure configurations across multiple products and technologies.• Acted as the primary responder for managed security incidents pertaining to client firewalls and all network infrastructure components.• Responsible for the maintenance of the Disaster Recovery plan and Business Continuity Plans• Part of the Blue Team to identify the vulnerabilities and have a defense mechanism in place.• Learned and helped IR team with Log collections, analysis, and forensic activities.• Investigating logs and payloads for server crashes/core dumps, DDoS attacks, SQL/XSS, SPAM, etc.• Installing and configuring Qualys in premises and on cloud environment• Responsible for performing vulnerability assessment on critical systems using Qualys.• Configured and scheduled Qualys Scanner in QRadar to perform scan on regular intervals.• Collaborate with team members in tuning SIEM applications to establish a baseline for network activity and rule out false positive events.• Coordinate with SMEs to resolve any security incidents and correlate threat assessment data as needed.• Support in the detection, understanding and resolving information security incidents affecting information systems & the business.• Research and recommend corrective actions to ensure information dissemination regarding targeted or potentially targeted attacks.• Investigate, document and recommend appropriate corrective action plans relating to IT security.

Software Engineering, Computer Science

Bachelor'S Degree, Computer Science

Bachelor Of Science In Computers, Computer Science