Muhammad Fayaz Khan Email & Phone Number

Doha, Qa

Doha, Qatar

- SOC Operations• Collaboration with vendor for monitoring and detection of incidents finetuning.• Assets log integration and monitoring.• Internal SOC Alert triage and collaboration with outsource SOC.• Incident analysis and response.• Threat Intelligence with regards to incident reported.• Security Awareness internal campaigns related employees to enhance their awareness of cybersecuritythreats and best practices.- SIEM/EDR/Email administration and collaboration• McAfee SIEM use cases and finetuning.• EDR policy tuning and alert triage.• Cofense email analysis and response.• PhishMe awareness and campaigns.• Microsoft Defender for office 365.- Vulnerability Management/Penetration Testing• Tenable SC and Nessus Manager for vulnerability management.• Vulnerability detection, prioritization, analysis, report, remediate, verify.• Penetration testing of applications and infrastructure collaboration with external PT teams for complianceand security hardening.Reporting and Documentation• Reported incidents findings, action taken at incident process are documented for compliance.

Islamabad, Islāmābād, Pakistan

Worked as an information security support engineer for SIEM and SOAR

Islamabad, Islāmābād, Pakistan

- Qradar SIEM Solution:• SIEM solution Qradar administration, maintenance and monitoring.• Custom Applications/DB/Window/Security Network Devices/Linux Log source integration.• 24/7 monitoring of Askari bank architecture.• SOC policies and escalation matrix development and enhancement.• Custom application parsing.• Rules/use cases creation in Qradar.• Qradar Backup and it’s testing.- Privilege Access Management: (IBM Thycotic Secret Server)• PAM launcher, secret creation and user role definition.• PAM hands-on: monitoring and analysis.• PAM procedure creation and implementation.- TrendMicro DSM and Threat Intelligence CTM360• User management on DSM products.• Policies management, Web Reputation Settings.• Suspicious Connection Settings, Behavior Monitoring Settings, DLP Settings.• CTM 360 threat intelligence platform for threat originating in cyberspace.• Incidents formulation and escalation.

Rawalpindi

- IT Governance (Information Security Team)• Review of current Policies and procedures and its improvement is maintained.• Audit of current procedures and its compliance are ensured with standards of ISO 27001 and HIPPA.• Risk Assessment Information security department.- Security Operations Centre (SOC)• Worked on SolarWind SEM SIEM solution filters/rules for enhancing threat detection.• Incident Response and Reporting.• Security log analysis and Application log analysis and integration.

Lahore, Punjab, Pakistan

- Security Operations Centre (SOC)• Involve in Vulnerability assessment of UOL Websites and documented its Vulnerabilities.• Revised and documented network security Policy of ITS department UOL.- IT Service Desk & Support Trainee Engineer• Learn services of IT department.• Identify issues facing to clients and provide suitable solutions to them.• Operate manage engine to view client incidents.- Network Trainee Engineer and Data Centre Officer Trainee• Network Logs management.• Network monitoring on OpManager.• Troubleshooting on end user.• Manage data center operation comprises of maintaining inventory, power system, visitors, and systemadministrators. Monitor various systems, such as SAP, Dell Compellent SC, education management system,Moodle, DC temperature.• Performed 24/7 shake hand duties with colleagues for monitoring of data center.

Ms Information Security, Information System Security

• Major: Network Security, Cryptography, Information System Security, Information Security Management System, IT Governance, Ethical.

Bs Computer Science, Bs Computer Science

Activities and Societies: • Major: Introduction to Programming C++, Database Management System, Advance Database Management System.

Ccna Ccnp Linux Mcse, System, Networking, And Lan/Wan Management/Manager