Muhammad Ather Email & Phone Number

Pakistan, Pakistan

Karachi

1) Preparing policy and procedures for the Secure Software Development Lifecycle (SDLC)2) Preparing policy and procedures as per ISO/IEC 27001 Information Security Management System3) Carrying out Asset Identification and Valuation across the division as per ISO/IEC 27001 Information Security Management System4) Carrying out Risk Assessment across the division as per ISO/IEC 27001 Information Security Management System5) Implementing security controls as per ISO/IEC 27001 Information Security Management System6) Providing software developers guidance about secure coding practices 7) Assisting Division Head for evaluating firewall, DLP and Fraud Management System Solutions

Karachi

1) Carried out Risk Assessment for various applications/systems2) Assisted Application security team lead to establish guidelines for security assessment of applications/systems3) Assisted Application security team lead to provide advisories and relevant security consultation to business and technology teams4) Monitored WAF events covering many critical web applications5) Executed Web Application black box and white box security tests using automated tools and manual exploration of systems 6) Assisted Application Security team lead to improve the security of android and IOS mobile applications

1) Reviewed IT Security Exception Requests and Change Management Process for firewall changes2) Assisted IT Security for review of IT Security Policy and procedures3) Assisted IT Security Manager to improve the Log Management Procedure4) Reviewed logs for Firewalls, Databases, Operating Systems and Web Application Firewall (WAF) using SIEM on monthly basis5) Assisted IT Security and relevant IT teams to embed new Data Sources into SIEM6) Coordinated with vendor and relevant IT teams for maintenance of SIEM and WAF appliances on periodic basis7) Leaded DR Implementation of SIEM in cooperation with vendor8) Tracked and investigated security incidents detected on WAF and SIEM9) Assessed remote and public web applications and provided relevant security consultancy to identify and mitigate web application vulnerabilities10) Coordinated with vendor and internal teams for periodic Vulnerability Scanning and Penetration Testing11) Assisted IT Security and I.T for assessment of SSL/TLS Certificate requirements

1) Redeveloped the NIFTeTRUST Official Website (https://www.niftetrust.com) with web security considerations 2) Redeveloped the NIFT Pvt Ltd Official Website (http://www.nift.com.pk) with web security considerations3) Carried out day to day dealing with existing and potentially new customers to assist them in choosing the right security solution as per their needs4) Provided customers with technical support for installing their SSL/TLS Certificates on Web and Email Servers5) Provided technical consultancy to various clients to address vulnerabilities primarily related to web security highlighted in their respective vulnerability scanning reports

Master Of Business Administration (Mba), Information Technology

Bs (Cs)

Intermediate, Pre-Engineering