Mudassir Ejaz Email & Phone Number

• Conducting Vulnerability Assessments using IBM AppScanto evaluate attack vectors, Identify System Vulnerabilities and Develop remediation plans and Security Procedures.• Conducting Web Application Vulnerability Assessment Threat Modelling, Gap Analysis, secure code review on the applications.• Planning, testing, and implemented new Checkpoint firewall installations, IPSO upgrades and evaluates hotfixes and patches installations.• Configured Checkpoint VPN to tunnel encrypted data over the public network.• Built new VSX Checkpoint devices from initial configuration and completed installation and deployment.• Troubleshooting and packet capture analysis on Palo Alto and Checkpoint firewalls• Working knowledge of IPsec VPN, security profiles, and SSL decryption on the Palo Alto firewall• Cisco routers and switches were configured and maintained to provide optimal network performance.• Managed Checkpoint GaiaR80.10, R77.3 Firewalls, and encryption technologies, including VPN, TLS, and SSH/TLS.• Played a critical part in architect-level decision-making about Data Loss Prevention (DLP) strategies, matching solutions with company goals.• Utilized a solid engineering background to design and maintain security measures, with a focus on mobile device management utilizing InTune.• Troubleshot and monitored Checkpoint Firewall traffic issues using Smart View Tracker, Smart Log and Smart iew monitor as well as CLI commands.

• Experienced vulnerability remediation involves prioritizing vulnerabilities based on their severity, potential impact, and exploitability. Vulnerabilities that could lead to data breaches, system compromise, or significant business impact should be addressed first.• Worked on SIEM, solar winds, and Symantec end-to-end point security for malware detection and threat analysis.• Internal labs were documented and maintained to create a well-documented and efficient working environment. This included network setups, server builds, VM creation, and licensing management.• Establish and enforce security policies and coding standards within your organization. These standards should cover aspects like input validation, authentication, authorization, and data encryption.• Effective vulnerability remediation often involves collaboration between development, operations, and security teams. Communication and coordination are key to addressing vulnerabilities efficiently.• To assure cutting-edge email security measures, I used my understanding of Microsoft and Proofpoint while avoiding obsolete solutions such as McAfee.• Migration from Cisco firewalls to Palo Alto firewall systems PA 4000, PA 500, and PA 200.• Experienced continuously monitor systems for new vulnerabilities, emerging threats, and changes in the threat landscape. Tools like intrusion detection systems (IDS) and security information and event management (SIEM) systems are used for this purpose.• Network infrastructure implementation and configuration in a business context.• Installation and upkeep of McAfee Drive Encryption, which is used to encrypt all workstation hard drives in the environment in order to protect the data contained on them.

• Network and server infrastructure installation, configuration, and management Cisco switch configuration and management (VLANs, VTP, STP).• Firewall (FortiGate) configuration and management, IPsec tunnels, and Remote Access VPN and ACL and NAT configuration.• Routing protocols (e.g., OSPF and BGP)• Domain controller (DC), DNS, DHCP server, and PRTG configuration and management• Onsite and Azure Cloud VM (Hyper-V / VMware) configuration and management• Experience with network protocols (TCP/UDP, ARP, HTTP/HTTPS), Active Directory and Group policy configuration and management.• Windows server technical support and Managing Microsoft Office 365 andTroubleshooting network and system problems.• Adapted to changing work hours, such as afternoon and/or night shifts on a rotational basis.• Used my Microsoft administrative knowledge to understand and maximize the integration of technologies inside the Microsoft ecosystem, enabling seamless cooperation.• Experience working on quarterly maintenance windows for failover, reboot, and other security devices on Checkpoint next-generation firewalls and Palo Alto firewalls.• Firewall (FortiGate) configuration and management, IPsec tunnels, and Remote Access VPN.• Reviewed the requirements for privileged access on an everyday basis and provide recommendations.• Designed and implemented email security systems, stressing a proactive approach to attack mitigation.• Reviewed and validate the privileged users and groups at Active Directory, Databases and application on a periodic basis.