An active participant of a mentorship program executed by a Senior Infosec professional with more than 15 years of experience in different domains such as Nuclear plants, Airport, consultancy, and critical infrastructure. I learned about best practices to secure a network in a realistic industry environment. It immensely helped me to understand security controls, threat risk assessment, threat modeling, NIST framework, and penetration testing tools. We learned through different risk scenarios and how to manage risk against each scenario in multiple workshops. I am confident in working on end-point controls and well-familiar with enterprise security controls and practices.• Projects under this program:-Risk assessment of a web portal.-Penetration testing of different websites.-Secure the cloud environment for a client.-Tuned the PAM environment with CyberArk tool.-Implement the NIST 800-53 controls for compliance with the NIST framework.-Malware Analysis-Vulnerability management using tools Nessus and Rapid 7

As a Teaching Assistant in the cybersecurity program at Dalhousie University, I played a pivotal role in guiding and inspiring the next generation of cybersecurity and networking professionals. Here are some key responsibilities and achievements:• Coordinated and conducted practical exercises, simulations, and workshops to enhance students' practical skills in areas such as network analysis, threat hunting, and incident response.• Supported students in configuring and troubleshooting network protocols, such as TCP/IP, Routing and Switching, OSPF, and BGP to enable effective data communication.• Used network monitoring tools to monitor the network like Wireshark, Nmap and resolved students queries by troubleshooting the network issues and configured security policies.• Mentored and guided students participating in cybersecurity competitions and Capture The Flag (CTF) events, providing technical guidance and strategic advice.

• Developed and updated information security policies, procedures, and standards, aligning them with industry best practices.• Strong knowledge of TCP/IP, LAN/WAN technologies, OSI Model, and routing/switching protocols. including the ability to analyze packets and troubleshoot network issues using network scanning and mapping tools like Nmap, Burpsuit, and Wireshark.• Led security detection, monitoring, and log analysis activities using SIEM, EDR and cyber threat intelligence tools. • Implemented and maintained security controls, deploying firewall security, IDS/IPS, and encryption methods. • Leveraged MITRE ATT\&CK framework to enhance threat detection capabilities within the SOC, mapping adversary tactics and techniques to improve alerting and response strategies.• Conducted comprehensive Vulnerability Assessments for diverse clients using vulnerability scanning tools like Tenable Nessus, Qualys, and Rapid7. Provided detailed recommendations for controls to mitigate potential impacts.• Effectively implemented incident response plans and incident management playbooks (IRP), updated policies. • Demonstrated a good understanding of cybersecurity frameworks, best practices and standards like NIST CSF, NIST SP 800-53, ISO 27001, PCI-DSS.• Executed impactful phishing campaigns utilizing tools such as KnowBe4 and Proofpoint to simulate real-world threats, effectively identifying vulnerabilities and significantly reducing susceptibility to phishing attacks.• Collaborate with other IT teams to ensure security measures are integrated into all technology-related projects and initiatives.• Stay up-to-date with the latest cybersecurity trends, threats, and solutions to adapt security strategies accordingly.• Create and maintain documentation related to security processes, incident response plans, and system configurations.