M Ali Email & Phone Number

Texas, United States

Plano, Texas, United States

Providing Production Support for multiple infrastructure applications and systems, while driving continued IT Operations Management service improvements. Working towards automation, and elimination of systems and or process bottlenecks. Lead and coordinate timely issue resolution for critical applications in partnership with other technicians from database, web service, network, storage, OS system admin, application developer, and management teams. Experience with Java, UNIX OS/DMZ servers, Perl and Python scripting, SQL query, System Analyst, web services, monitoring (MIPS) documentation, DC (Data Center) exercise, change control, troubleshooting, PowerShell, and process improvement.• Establish and improve monitoring to measure end-to-end performance and end-user availability of systems via a suite of common monitoring tools.• Perform root cause analysis for recurring problems by partnering with other teams to develop long-term resolutions, including implementing preventative measures to minimize problems & production outages.• Manage and implement production changes, releases, and upgrades in a collaborative environment in accordance with lifecycle methodology and risk guidelines and data management.• Monitor Production environments / scheduled jobs and identify improvement to monitoring.• Supports the 24x7 day-to-day maintenance of the infrastructure application systems in operation, including tasks related to identifying, troubleshooting, and resolving application and data issues.• MIPS (Monitoring Information Process Suite) adding the servers to MRD for monitoring and SiteScope alerts, Putting severs on iMon, MaintMode for certain period.• Experience with supported tools such as: myCTO, MIPS, iMON, JFrog, Cutover, MatterMost, TML (Trusted Media Library) Dynatrace, Splunk, GIS portal, AppHQ (Enterprise App Management) DSSAPPS Server Information RunBook, Swagger UI, Tableau, SCCM, Tanium, F-DNS, BladeLogic, Horizon Artifactory, True sight Orchestration.

Dallas, Texas, United States

• Responsibilities include preventing and protecting against unauthorized access, maintaining the integrity and confidentiality of critical data against internal and external threats.• Ensuring enterprise-level endpoint protection and encryption; and simplifying the security toolset by implementing superior products that cover many security vectors without impeding systems' performance or diminishing user experience.• Creating Active Directory Groups and send Azure Onboarding Forms to System Managers for the Application for Azure SSO Tasks, SSO implementations, BURM Approvals, Confluence, Validate work in Test and Dev environment.• Working on Azure Active Directory for test and production environment and as well Azure DevOps for User Stories.• Working on Azure SSO tasks, SSO MRA Applications, Azure Active Directory, Atlassian, IAM, PKI, Windows, Linux, Patching, Release, Sailpoint, Click to Run, Office 365 connect to CA Privileged Access Manager Client.• Updating the SSO Applications Organizer and Attending weekly meetings for updates.• Maintain knowledge of current security trends and advisories, and develop regular communication to develop a wide security awareness across the firm’s stakeholders.• Assist management to develop the strategy for the future direction of the Information Security Management System. Experience with configuring and optimizing BeyondTrust PAM in Client environments.

Atlanta, Georgia, United States

• Serve as a primary technical security resource on all product development.• Perform design reviews and technical security assessments to highlight risk and help engineering teams improve the overall security of the products.• Design and implement security best practices and standards across varied engineering teams and environments.• Implement and conduct code reviews with a combination of static testing, manual reviews, and dynamic analysis / pen-testing.• Understanding of all development environments, build tool like Jenkins, Maven, NPM, Gradle, Tomcat, Spring, Apache etc.• Conduct threat modelling, identify & drive risk decisions, and influence technical designs and architectures.• Engage with developers to provide remediation support, triage results and generating CSV reports.• Perform security reviews of new services and features. Cloning repositories and adding YAML files.• Build tools to simplify and automate Vulnerability Management processes• Providing engineering designs to mitigate security vulnerabilities in new software solutions.• Design and implement tooling and automation for application security HP, Synopsys, Veracode, ChekMarx (Synopsys is the primary tool) (e.g. SAST/DAST/IAST/SCA in CI/CD)• Performing regular security testing as well as code reviews for improving the software security• Maintaining technical documentation related to software security.• Ensuring software security at all levels of architecture• Staying updated with latest tools and advanced industry practices for software security.• Strong experience in web security and federation protocols (SSL/TLS, REST, OAuth, SAML, LDAP-S, SAML, WS-Federation, SCIM, OAuth, and OIDC, XSS, etc.)• Develop and execute an appropriate security testing strategy for each engagement, including performing software security testing against applications, platforms, and systems.

Mississauga, Ontario, Canada

Conducting Vulnerability Assessments using IBM AppScan to evaluate attack vectors, Identify System Vulnerabilities and Develop remediation plans and Security Procedures.• Conducting Web Application Vulnerability Assessment & Threat Modelling, Gap Analysis, secure code review on the applications.• Troubleshooting on the DAT and signature update issues on the endpoints• Drive cloud security standards through developing architecture and work with application teams to ensure the best solutions are implemented to support cloud initiatives.• Installs, configure, and troubleshoot PKI hardware and software• Managing PKI Worldwide• Deploy and support information security systems and solutions such as key management, IPS/IDS, SIEM, MDM, NAC, APT detection, and endpoint management for remote user.• Performed Vulnerability Assessments to the web applications used in the organization using the tools Burp suite, HP Fortify also performed Data Classification.• Performed packet analysis for core network services {HTTP(S), LDAP, SQL, SMTP, DNS, NTP} using a variety of tools sniffing tools (Wireshark, Tcpdump, Fiddler).

Toronto, Ontario

Identified the critical, High, Medium, Low vulnerabilities in the applications based on OWASP Top 10 and SANS 25 and prioritizing them based on the criticality.• Managed SIEM user accounts (create, delete, modify, etc.)• Created client-specific Watch Lists if necessary.• Conducted penetration tests on systems and applications using automated and manual techniques with tools such as Metasploit, Burp Suite, Kali Linux, and other open source tools as needed and report the findings.• Attended Vendor-specific meetings and conferences for Business and Professional development.• Created innovative solutions to automate and reduce timeframes for operational changes as well as initial installation of the platform.• Endpoint security platform detecting malicious behavior and prevents malicious files, Anti-Malware Defense Experience with Carbon.• Experienced with LogRhythm, Tripwire, SNORT, NetSparker, GFI Languard, Acunetix and Qualysguard.

Mississauga, Ontario, Canada

Established vulnerability assessment practice, proactively ensuring safety of Client-facing applications and minimizing client audit findings.• Implemented, configured and managed multiple vulnerability assessment tools such as Nexpose, Nessus.• Explanation of the security requirements to the design team in initial stages of SDLC to minimize the efforts to rework on issues identified during penetration tests.• Expertise in using the DAST tools (Like IBM AppScan and Burp Suite Pro) while the application is running to penetrate the application in various ways to identify potential vulnerabilities outside the code and in third party interfaces.• Deploy and support information security systems and solutions such as key management, IPS/IDS, SIEM, MDM, NAC, APT detection, and endpoint management for remote user.• Performed security analysis and identifying possible vulnerabilities in the key derivation function, create Vulnerability Assessment report detailing exposures that were identified, rate the severity of the system & suggestions to mitigate any exposures & testing known vulnerabilities.

Mississauga, Ontario, Canada

Conducted network Vulnerability Assessments using tools to evaluate attack vectors, Identify System Vulnerabilities and develop remediation plans and Security Procedures.· Set up emails encrypted using PKI and PGP· Worked with the Program Managers and Technical subject matter experts to perform Vulnerability evaluation, assist in System Architecture Design, and Risk Management using Approved Security Tools.· Uncovered high Vulnerabilities at the Infrastructure level for Internet facing Web sites.· Helped establish and implemented a framework for Identity and Access Management leveraging Corporate best practices, Standards and Tools.· Used SAST tools (Like HP Fortify and SonarQube) to test Source code, Byte code to expose weaknesses in the Software before it is deployed.· Worked closely with Risk assessment team to provide them with the proof for the Vulnerabilities exploited for the final report.

Winston-Salem, North Carolina, United States

Worked with the Program Managers and Technical subject matter experts to perform Vulnerability evaluation, assist in System Architecture Design, and Risk Management using Approved Security Tools.· Uncovered high Vulnerabilities at the Infrastructure level for Internet facing Web sites.· Helped establish and implemented a framework for Identity and Access Management leveraging Corporate best practices, Standards and Tools.· Expertise in using the DAST tools (Like IBM AppScan and Burp Suite Pro) while the application is running to penetrate the application in various ways to identify potential vulnerabilities outside the code and in third party interfaces.· Performed security analysis and identifying possible vulnerabilities in the key derivation function, create Vulnerability Assessment report detailing exposures that were identified, rate the severity of the system & suggestions to mitigate any exposures & testing known vulnerabilities.· Performed threat modeling of the applications to identify the threats.

Niskayuna, New York, United States

 Maintained SQL Script for creation of Database Objects. Created, Maintained & Scheduled various reports in SSRS like Drill down and Drill through & ParameterizedReports using SQL Server Reporting Services SSRS. Designed and Maintained SSIS Packages for Importing and Exporting Data Migration and Conversion fromLegacy Systems to SQL Server 2008. Experience working in Azure Security including RBAC, Azure Security Center and Azure Monitor Have experience working Azure Automation including Runbooks and Terraform scripts Ensure that Firewall Rules are reviewed in accordance with Risk management Framework Involved in designing data schema and development of SOAP web services with Axis implementation andREST web services with JAX-RS. Isolate and diagnose network problems,SSH,HTTP,HTTPS,involving TCP/IP, DHCP, DNS, Group Policy,Deployment & support of Active Directory Services.

Diploma Of Education, Enterprise Network Engineer

Bachelor'S Degree, Business/Commerce, General, First