Fakhruddin Abbas Email & Phone Number

Dubai, Ae

Developed and implemented comprehensive cybersecurity strategies, policies, and procedures to safeguard the organization's digital assetsDeveloped and implemented secure OT and IT system architectures, considering industry best practices, regulatory requirements, and business needsProvided technical leadership on security projects, ensuring that solutions meet business requirements as well as industry best practicesDefined and enforced security standards for OT and IT infrastructure, including authentication, access controls, encryption, and monitoring mechanismsConduct risk assessments, penetration tests and security audits to identify vulnerabilities and recommend appropriate security measuresActively monitoring and triage of security incidents, root cause analysis (rca) and implementing permanent fix for issueMonitoring alerts from SIEM, EDR and other cloud security toolsConduct thorough risk assessments to identify potential vulnerabilities and threats to the organization's information systemsEvaluate and select cybersecurity tools, technologies, and solutions to enhance the organization's security postureIdentify alerts/notification which can be automated using Cortex XSOAR playbooks, integrating TI and other connectors from XSOAR marketplaceCollaborate with cross-functional teams to integrate security controls into the design and deployment of OT and IT systems, including network infrastructure, industrial control systems, and associated componentsActively contributing as a strategic security advisor on the Enterprise Architecture Review Board

Dubai, Ae

Providing direct support on high priority security incidents for Business Customers, stakeholders and partners. Managing Security Information and Event Management (SIEM) tool, security configuration support, queries for hunting and data visualization. Incident management, playbooks for automation. Creating new polices for new threats, threat hunting on different data sourcesIntegrating SIEM with EDR, WAF, Windows Security, Linux, firewall, Web proxy, OT monitoring system, NDR, Antivirus, PAM, DAM, DNS, IAM data sourcesDesigning, engineering and deployment of new and existing cybersecurity tools, processes, and proceduresMonitoring cloud environments using security tools and services to detect potential intrusion attempts, data exfiltration, lateral movement, and unauthorized accessWorking with different teams to resolve issues related to security posture, User accounts and Access levels. Security Operations managementAdministrating and Managing Microsoft 365 security product suiteManaging EDR, OT monitoring tool, External Attack Surface Management, VAPT tool, Security validation toolWorking with application owners and provide standards for audit logging Performing threat detection, analysis, reporting and policy creation using Natural query and Kusto Query Language (KQL)Creating detailed incident reports following a successful breach or other security event

Dubai, Ae

Managing cloud identity & access management with Okta an Azure Active directory and M365 platformNew application integration using SAML, WSFed, OpenID with Okta and Azure AD for SSO and user lifecycle managementManaging SIEM, security configuration support, queries for hunting and data visualization. Incident management, playbooks, and runbooks for automationPerforming vulnerability assessment on networking & endpoint devices and releasing advisories for the teamsProactively identifies and investigates potential issues in security controls. Creating threat detection rules, anomaly detection and UEBA using ML policies. Implements new and identify gaps in security policy and standards for the serviceManaging Endpoint security with Microsoft Defender for Endpoint and Azure ATPAdministrator and management Microsoft defender for Identity, Defender for Cloud and Cloud apps, M365 DefenderCreates detections based on available data (Indicators of Compromise IOC and Tools Tactics Procedures TTP). Continues to drive automation of detection and responseWorking with different teams to resolve issues related to security posture. User accounts and Access levelsManaging SIEM application platform, creating new polices for new threats, threat hunting, Data ingestion to SIEMSupporting Windows & Linux Server operating system, Azure GovernanceManaging Microsoft TeamsIntegrating SIEM with EDR, F5 WAF, Windows Security, Linux, Palo Alto firewall, Zscaler, Nozomi OT system, Corelight, McafeeManaging Active Directory forest and DNS, Microsoft PKI / SSL CertificateAdministration of Exchange 2016 and office 365 Exchange online and Exchange Online ProtectionAdministration of VMs in Azure cloud and VMware stack, monitoring VM performance, Seizing and cost managementAdministration of VMware, Hyper-VKnowledge of LAN/WAN/Firewall/VPN network technologiesManage incident escalation, Leads, Deliver and Review various projects. PowerShell scripts, monitoring of Office 365

Dubai, Ae

• Administer Microsoft Exchange 2007 & Exchange 2010 DAG• Following industry standard of ITIL Change, Incident & Task management.• Verifying Exchange database replication, Mail queue, health monitoring, etc.• Verifying AD replication• Monitor Microsoft Message Center and Service Health, planning and implementing end-user consumer communications as required.• Audit reporting and support, Design and implement process automations and service improvements• Accountable for Group Policy design, deployment and management• Yearly once DR drill of AD and Exchange• Windows patch management using SCCM 2012 and reporting of servers and desktops• Monitoring of servers and Virtual environment using SCOM• Regular Health Check of IBM & HP Blade enclosure and servers• Firmware upgrade for blade enclosure & servers• Monitor Print, DHCP & File server cluster and events• Firewall rules creating and managing TMG at Production site and DR Site• Datacenter facility management• Working on Incidents, Change request to maintain the SLA• Periodically cleanup of active directory like removing expired user accounts, removing inactive computer accounts• Managing Hyper V cluster with SCVMM hosting production & development servers• Managing and monitoring Hyper V servers & VMs with SCVMM, SCCM & SCOM• Working on Projects, creating business case, RFP & BOQ.• Finding out the underlying cause of the Problem. Eliminate known errors by working with the Change Management Team• Server installation (HP & IBM Blade)• Always creative in finding ways to automate System management• HP & IBM Blade servers’ maintenance and firmware upgrades.• MS LYNC Server administration.• Managing virtualization Infrastructure of Hyper V 2008R2, 2012R.• Managing servers & services on Azure• Manage/Monitor O365 users

• Active Directory Monitoring and Management of User Accounts and Group Policies. Support issues related to AD, DNS, DHCP and GPO• System Security monitoring using Mcafee EPO Server. Support issues related to replication in Distribution point and agent installations• Manages security devices such as ISA 2006 firewall, VPN, etc. Creating and modifying rules in ISA as per the requirements• Perform daily backup operations using Symantec Backup Exec 12, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary • Monitoring of Exchange 2007 server, creating and modifying mailing list. • Apply OS patches and Office & IE upgrades on a regular basis using SCCM• Responsible for system security planning, and implementing security policies across multiple platforms• Basic configuring of Cisco Switches, managing & Monitoring. VLANs configuration and basic troubleshooting. • Responsible for designing new infrastructure• Conducts active penetration tests; discover vulnerabilities in information systems• Recommend server upgrades, and other maintenance activities• Managing ESX 4.1 servers with Vcenter

Bangalore, Karnataka, In

Desktop Support

Bachelor'S Degree, Computer Applications

Secondary