Hamed Javam, Cissp Email & Phone Number

Vancouver, British Columbia, Canada

London, Uk

• Led the security strategy for Azure cloud environments, focusing on identity management, network security, and data protection.• Managed security monitoring and incident response using Azure Security Center, Azure Sentinel, and Microsoft Defender for Cloud.• Designed IAM policies and managed Entra ID for secure access management, including MFA and conditional access policies.• Developed ARM templates and Azure Blueprints for secure resource provisioning and enforced security policies using Azure Policy• Ensured secure connectivity between on-premises infrastructure and Azure cloud resources through architectural best practices.• Supported the migration of on-premises applications to Azure, ensuring security best practices were followed throughout the transition.• Collaborated with DevOps teams to integrate security into CI/CD pipelines, promoting DevSecOps practices.

• Developed comprehensive security strategies for AWS and Azure cloud environments, enhancing identity management and network security.• Conducted security monitoring and incident response with AWS CloudWatch, CloudTrail, and AWS Config for resource compliance.• Managed IAM roles and permissions, utilized AWS KMS for key management, and leveraged AWS Security Hub for alert management.• Successfully architected and implemented GRC-compliant infrastructure, integrating NIST CSF, CIS Controls, and NIST SP 800-53 to enhance organizational security and risk management.• Architect distributed and hierarchical on-premises SIEM by Splunk Enterprise and Splunk Enterprise Security with more than 10 instances of Splunk.• Lead a high-performance SOC team through mentorship and close collaboration.• Design scalable and robust syslog ingestion with syslog-ng and Heavy Forwarder.• Administer 10+ Linux Splunk instances, tuning OS and Splunk environment for optimal performance.• Configure data inputs with effective cross-team collaboration to ensure over 90% of ingress logs are in normalized CIM format for event correlation and data model acceleration.• Create and refine SPL queries for advanced correlation search development.• Apply enrichment principles to notable events, ensuring high-quality and actionable security alerts with threat intelligence, privileged user lists, and asset lists.• Protect endpoints from malware, ransomware, data leakage, and other threats by leveraging endpoint protection and EDR solutions.• Manage and optimize SIEM solutions to improve threat detection and response capabilities.• Ensure fast incident response through effective incident response workflows with collaboration with cross-functional teams.• Increase MITRE ATT&C coverage by tuning sources and SIEM.• Lead a company-wide security awareness training program, reducing phishing click rates by 80%

• Led a high-performance Infrastructure team, consists of Linux admin, Server Virtualization, NOC/SOC, DB, Network and vendor.• Architected the security of firm infrastructure aligned with security frameworks, compliance requirements, and business needs.• Architect and deploy SIEM solution using Splunk Enterprise Security Application and NSM SO.• Intergrade Splunk with multiple security tools and data sources including firewalls, VPNs, IDS, IPS, and WAFs from vendors such as Cisco ASA, FortiWeb, FortiGate, Zeek, Suricata.• Reduce total cost of ownership (TCO) by deploying Open-Source Solutions in like Zeek, Suricata, HA-proxy.• Reduce unauthorized access to our infrastructure by 95% through centralized Identity and Access Management (IDAM) using Active Directory, FreeIPA, Auditd, and Splunk.• Conduct Business Impact Analysis (BIA) and spearheaded Business Continuity Management (BCM), Business Continuity Planning (BCP), and Disaster Recovery Planning (DRP) projects, achieving an RTO of 1 hour and an RPO of 8 hours.• Manage changes by validating and reviewing configuration changes is security aspects.• Assisted in the development and implementation of a comprehensive enterprise cybersecurity strategy in line with NIST Cybersecurity Framework (CSF).• Conduct threat modelling and application security reviews using the STRIDE model.• Identify and remediated all critical vulnerabilities in production web applications using Nessus.• Mentored the SOC team in threat intelligence using MITRE ATT&CK, Alien OTX, and VirusTotal.• Audit applications Security and collaborate with cross-functional teams to mitigate the risks.• Review third party application security audit reports and provide security guides for their findings.• Fortified Web Applications with WAF solution and successfully mitigate all OWASP top 10 attacks.

• Fortify Web Application Security by WAF Appliance deployment in reverse mode proxy.• Fortify Datacenter Servers by NGFW deployment with multiple zones• Conduct quarterly vulnerability assessments of 50+ Linux and windows servers

• Worked closely with stakeholders to architect and implement SOC and SIEM solution that aligns with Governance, Risk, and Compliance (GRC) requirements.• Enhance SIEM insight with application layer data from traffic sensors, direct DBMS queries, threat intelligence feeds, and asset-related vulnerability lists, along with user privileges.• Spearheaded SIEM projects using Splunk Enterprise Security.• Conduct Vulnerability assessment and applications and eliminate all high+ vulnerabilities.• Hands-on experience in deployment of various security appliances like firewall, VPN, IDS, IPS, WAF from different vendors like Cisco, Palo Alto, Juniper, Fortinet, F5.

• Conducted comprehensive audits for ISMS ISO 27001 compliance, ensuring adherence to information security management standards.• Designed and deployed secure infrastructures for 25+ enterprises, adhering to Cisco best practices and utilizing security tools including firewall, VPN, IDS/IPS, WAF.• Conducted vulnerability assessments and implemented remediation solutions to enhance security posture.

• Teach Computer Programing, Networks and Security courses to undergraduate students.

Master Of Science - Ms, Computer Engineering

Bachelor'S Degree, Computer Engineering