Naveed Ul Islam Email & Phone Number

Alberta, Canada

Paddington, London, Gb

• Driving security posture maturity for about 200 products/applications with the help of around over 20 security champions, several architects and development leads.• Leading in threat modelling, design reviews, and spot check peer code reviews as part of the secure development lifecycle.• Evaluating risk and governing release signoff against Government of Canada standards such as the RCMP TRA model and ITSG-33 frameworks.• Driving security requirements into Architecture Review Board owned by Enterprise Architecture and providing security signoff at several stages.• Providing support to the dev teams to enhance the secure development lifecycle and automated security testing as part of the CI/CD pipelines.• Helping to respond to questions driven by various audits such as SOC 2, banking client questionnaires, PCI requirements, NIST 800-53 etc. • Assess security solutions and their compliance against contractual obligations which includes data residency requirements and regulations such as GDPR and PIPEDA.• Assessing the application security maturity and building enhancement plans byutilizing OWASP, SAMM and BSIMM continuous compliance audits.• Working with the CRO and CISO teams to provide visibility into the security risks and compliance status against corporate standards.• Helping onboarding products on WAF and creating related incident response processes.• Assisting in assessing and integrating data governance requirements across the architecture.• As a member of the Product and Data Security Leadership team, working with global product and security teams to identify program gaps and finalize target state roadmaps for the CISO which includes product, data and infrastructure security components.• Performing research to evaluate and recommend technology solutions based on the latest technology trends, application capabilities, and best practices. Recent work relates to threat modelling, API security, security tool integration, supply chain risks and WAF.

Bracknell, Berkshire, Gb

• Designed and developed an enterprise application security program for Euronet global to ensure integration of secure development and deployment requirements.• Quarterly assessed Security Compliance posture for Euronet for three entities in my segment, HiFX (UK, New Zealand, Australia). Xe (Canada) and Ria (Denver, CO).• Led vulnerability management program for Xe’s global infrastructure team and prepared and delivered quarterly risk reports to Xe’s CEO and the CTO.• Identified gaps and prepared target state roadmaps for CTO for my segment.• As SSO, served as liaison with other companies within the Euronet for security initiatives to provide updates to the security committee about compliance levels of sister companies.• Provided AWS infrastructure engineering and support to Xe, Ria and HiFX entities for VPN Tunnels, Transit Gateways, IAM management, Athena, Routing, AWS WAF etc.• Led security incident management program for Xe and guided team members toward incident containment, process documentation, and lesson-learned integration.• Conducted and supervised penetration testing and red team exercises through external vendors to improve blue team defences. • Supervised the implementation of static code analysis (SAST) for Xe’s global application teams for all kinds of applications, including mobile and API backends.• Led the work on security and DevOps integration, including automated security testing as part of the cloud-based CI/CD processes.• Deployed OSX device management through Ansible scripts using AWX Tower.• Led and Managed integration of Wazuh for Server-side File Integrity Monitoring.• Managed PaloAlto UTM devices to ensure application layer control over on-prem and in AWS EC2 environments.• Deployed and managed Z-Scaler cloud proxy for Xe’s corporate users.• Tested and deployed Duo MFA integration with various cloud-based services for over 500 user accounts.• Ran AWS IAM operations across 40 AWS accounts that included 500 user accounts.

Got this opportunity to successfully manage this event and raised over 200k in donations for the Vaughan Hospital.

Toronto, Ontario, Ca

• Developed Canada’s first Cyber Security Resilience program for one of the largest banks in Canada and identified key metrics, KPIs and KRIs to measure progress.• Was responsible for delivery of Vulnerability Assessment / Penetration Testing, Red Teaming, Threat and Security Analytics service portfolios with a team of four.• Performed cybersecurity assessments for niche technologies such as Cloudera Hadoop and Microsoft SharePoint infrastructure to identify and prioritize related business risks.• Provided Patch Management program assessment within the Transportation industry withasset inventory Threat Risk Assessment using CVSS 2.0 scoring system.• Provided Security Log Analytics SME services to Cyber Forensics clients in post-breachinvestigation scenarios leveraging tools such as FireEye, Loom System and Splunk.• Oversaw Threat Intelligence within the Cyber Security Advisory group.• Developed Target state roadmaps and conducting feasibility studies to achieve cybersecurity defensibility and maturity based on client-specific technology risks.• Helped in sales by creating and contributing to sales proposals, cost estimation and budget planning including the creation of Statements of Work, Engagement Letters, and project kickoff presentations.• Managed projects within time and budget effectively by selective delegation, cost-effective staffing and reviewing the deliverables for quality feedback.• As a performance manager, I kept internal metrics to determine quantitative year-end performance-based incentives and promotions for the deserving team members.• Provided security control assessments to small and medium clients in the banking industry using OSFI and NIST frameworks and providing risk-driven recommendations.• Assessed Canadian Microsoft Azure Cloud datacenters using the CSA CCM framework.• Provided application security SME services for Web 2.0 and Mobile applications.

Vancouver, British Columbia, Ca

• Leading a team of passionate security professionals to offer intelligent security monitoring, analysis, and analytics.• Driving service maturity, tracking innovation and capitalizing on cutting edge security research to offer the most advanced solutions in the field.• Socializing security developments across functional teams and with the customers.

Vancouver, British Columbia, Ca

• Security analytics research• Global threat research• Big data mining and predictive analytics• Correlation of data sets using SIEM• Tool development and automation using AI and machine learning• Analysis and workflow automation

Vancouver, British Columbia, Ca

• Lead Security team as a subject matter expert in application vulnerabilities, their remediation and early tracking• Lead integration of Secure Software Development Lifecycle in the company• A lead impact assessment by Web Server forensics for key web-related worms. • Lead internal and external operations teams in the prioritization and remediation of identified security risks.• Lead weblog forensics program• Performed Desktop and Network forensics for internal incidents• Monitored and analyzed industry threats and global anomalies• Participated as a “first responder” on the THFS Incident Response team. Lead internal and external operations teams in the response, assessment, and containment of technological and physical security incidents. • Performed Threat Risk Assessments (TRA) on a variety of complex application infrastructures.

Secure network solution designing and deployment planning.

Toronto, Ontario, Ca

• Involved in preparation of design documents for Sharepoint 2007 implementation roadmaps for LMS (Loan Management System) Enterprise application Team involving development, QA and Production environments for Sharepoint development• Providing IT Support for Sharepoint compatibility issues to Managers and Directors• Involved in advising infrastructure planning teams• Involved in delivering PowerPoint presentations and team education for Sharepoint Portals• Lead Sharepoint and Lotus teams for Sharepoint email integration across the enterprise• Provided on-going support to resolve server conflicts with SQL Server Integration Services• Helping IT teams to identify programmatic bugs in Crystal Reports Custom Scheduler.• Maintained Sharepoint installation and configuration in the Enterprise

Redmond, Washington, Us

ACE Team vendor (V-Empower)• Conducted security assessments for software applications. The audit also involved the black-box testing of pre-compiled assemblies in .Net to check against buffer overflows vulnerabilities and other memory leaks• Conducted privacy audits for software applications to make them compatible with the legal standards. This included identifying and securely managing PII (Personally Identifiable information), HBI (High Business Impact) and MBI (Medium Business Impact).• Provided consultancy to the application teams to adhere to the principle of accountability that involves authentication, authorization, the principle of least privilege, reliable event logging, data protection, and scheduled backups.

Bee, Telecomm, Dsp, Computer

Education record