Mahtab Khalid Email & Phone Number

Lahore, Pk

Lahore, Punjab, Pakistan

The Head of Cybersecurity Operations is a senior leadership role responsible for managing and integrating the operational aspects of cybersecurity, focusing on Penetration Testing (PT), Security Operations Center (SOC), and Governance, Risk, and Compliance (GRC). This role ensures the organization's security posture remains resilient against emerging threats, fosters collaboration across teams, and aligns cybersecurity strategies with business objectives.Key Responsibilities1. Strategic Leadership:Develop and implement a comprehensive cybersecurity operations strategy encompassing offensive security (PT), defensive security (SOC), and compliance (GRC).Align cybersecurity goals with the organization’s business objectives to mitigate risks effectively.Act as a liaison between the cybersecurity teams and senior management, communicating risks, strategies, and incidents in business terms.2. Penetration Testing (PT):Oversee the offensive security program, including vulnerability assessments, penetration testing, and red team exercises.Ensure timely identification and remediation of vulnerabilities in systems, networks, and applications.Promote the adoption of secure coding and development practices across the organization.3. Security Operations Center (SOC):Lead the SOC team in monitoring, detecting, and responding to cybersecurity incidents.Establish and enforce incident response plans, including root cause analysis and lessons learned.Ensure effective threat intelligence gathering and sharing across relevant teams.4. Governance, Risk, and Compliance (GRC):Supervise GRC programs to ensure compliance with industry standards, regulations, and frameworks (e.g., ISO 27001, NIST, GDPR).Conduct regular risk assessments and audits to maintain a strong security posture.Lead efforts to create policies, procedures, and controls that mitigate risks and address regulatory requirements.

Lahore, Punjab, Pakistan

Designing and implementing robust security solutions tailored to organizational needs.Penetration testing and vulnerability assessments.Managing security tools, including intrusion detection systems.Conducting external and internal network testing, web application testing, wireless testing, and social engineering assessments.Leading incident response efforts, investigating security breaches, containing impacts, implementing remediations, and conducting post-incident analysis.Aligning security strategies with business objectives.Communicating risks and solutions effectively to non-technical stakeholders.Regulatory Compliance frameworks like GDPR, HIPAA, PCI DSS, and ISO 27001, guiding organizations toward compliance.Delivering tailored consultancy services, assessing client needs, and navigating complex organizational structures.Translating technical concepts into actionable business strategies.Ensuring cybersecurity measures bolster business resilience and continuity.Security excellence, reducing risks, and empowering organizations to operate securely in an ever-evolving threat landscape.

Online

Profile: https://tryhackme.com/p/MahtabkhalidRoom Completed:Content Discovery, Burp Suite: The Basics, Pentesting Fundamentals, Principles of Security, Walking An Application, Nmap, Kenobi, Vulnversity, Hydra, Web Application Security, Metasploit: Introduction, Vulnerabilities 101, Burp Suite: Repeater, HTTP in detail, OWASP Juice Shop, OWASP Top 10, Nessus, Post-Exploitation Basics, Attacktive Directory

Remote

Practice different digital forensics and siem security solutions

I achieved the Guru rank on HackTheBox by successfully hacking into various machines, networks, and systems. I rooted 43 different active and retired Windows and Linux-based machines. Among top 100 hackers world wide.

Lahore, Punjab, Pakistan

•Engage stakeholders within IT and business function to track vulnerabilities and ensure its closure and perform periodic security assessment of all products with regards to newly discovered attack vectors.•Conducting security awareness sessions for regional and district Staff, capacity building, preparation of training modules and presentation and KPI’s•Devising and establishing IT policies and systems to support the implementation of strategies set by upper management•Analyzing the business requirements of all departments to determine their technology needs. Overseeing all technology operations and evaluating them according to established goals.•Inspect the use of technological equipment and software to ensure functionality and efficiency. Identify the need for upgrades, configurations or new systems and report to upper management•Coordinate IT managers and supervise computer scientists, technicians and other professionals to provide guidance

Lahore, Punjab, Pakistan

•Operate a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired and wireless networks, and web applications/devices.•Communicate security issues to a wide variety of internal and external customers to include technical teams, executives, risk groups, vendors and regulators.Develop and maintain security testing plans. Automate penetration and other security testing on networks, systems and applications. Develop meaningful metrics to reflect the true posture of the environment allowing the organization to make educated decisions based on risk.•Engage stakeholders within IT and business function to track vulnerabilities and ensure its closure and perform periodic security assessment of all products with regards to newly discovered attack vectors.•Performed dynamic and static analysis of web application using IMB AppScan, Nesses and Acunetix. Analyze systems for potential vulnerabilities that may result from improper system configuration.•Ran vulnerability and compliance scanning on test machines and reviewed security standard and minimum security baseline for the client. Assisted on Monthly conference call to discuss implementation and upgrade of critical infrastructure.•SIEM: Incident Analysis and Response: Splunk/QRadar Alerts Analysis, Creating Splunk/QRadar quires for daily investigation tasks. IBM QRadar: Incident Response and Analysis, use cases tuning to reduce false positives, creating use cases to detect different suspicious activities.•Installing, managing, and updating software (VPN, IDS/IPS, DLP and Firewall) on the systems and networks they monitor. Developing plans to protect against malware and procedures for attack response.•Reviewed security documentation and make recommendation. Assisted in conference call meeting with Developer to mitigate vulnerability findings and patch management

Lahore, Punjab, Pakistan

Primary Focal Point of Contact for Law Enforcement Response team on Social MediaPlatforms (Facebook, WhatsApp, Google, IMO, Viber, Dingtone)•Tracing of Person through Technical Data Analysis, Call Data Record Analysis, SMSData Record Analysis, Location Record Analysis, IMEI, IMSI Data Analysis, IP DataAnalysis, IBM Analyst Note Book.•Blocking of Content – Social Media Platforms, Coordination with PTA, Regional andDistrict offices regarding content Blocking.•Legal guidance and decision making initiatives.•Operate a hands-on role involving penetration testing and vulnerability assessmentactivities of complex applications, operating systems, wired and wireless networks,and web applications/devices.•Develop and maintain security testing plans. Automate penetration and other securitytesting on networks, systems and applications. Develop meaningful metrics to reflectthe true posture of the environment allowing the organization to make educateddecisions based on risk.•Produce actionable, threat-based, reports on security testing results•Engage stakeholders within IT and business function to track vulnerabilities andensure its closure and perform periodic security assessment of all products withregards to newly discovered attack vectors.

Lahore, Punjab, Pakistan

Manage information technology and computer systems Plan, organize, control andevaluate IT and electronic data operations.Manage IT staff by recruiting, training and coaching employees, communicating jobexpectations and appraising their performance.•Design, develop, implement and coordinate systems, policies and procedures.•Ensure security of data, network access and backup systems.•Act in alignment with user needs and system functionality to contribute toorganizational policy.•Identify problematic areas and implement strategic solutions in time.•Audit systems and assess their outcomes.•Preserve assets, information security and control structures.•Handle annual budget and ensure cost effectiveness.•Reviewed security documentation and make recommendation Assisted in conferencecall meeting with Developer to mitigate vulnerability findings and patch management.•Installing, managing, and updating software (VPN, IDS/IPS, DLP and Firewall) on thesystems and networks they monitor. Developing plans to protect against malware andprocedures for attack response.•Monitoring networks for all incoming code and responding to any negative activity.Analyzing existing networks to provide suggestions and best practices to maintaindata security.

Ms - Information Security, Information Security, 3.30 /4

Activities and Societies: Project, Assignments, Group Task, Quiz, Discussion Board, Mid-Term, Final-Term, Research ArticlesIS – 5053.

Master Of Computer Science, Computer Science, 3.12

Activities and Societies: Assignment, Group Discussion Board, Quiz, Mid-Term, Final-TermCS201 Introduction to Programming, CS601 Data.