Qamar A Khan Email and Phone Number

Security Engineer (Jan 2020 – Present)• Led a strategic role in the design, implementation, and maintenance ofcloud security infrastructure and tools• Developed standard procedures for the administration, policymanagement, versioning/patching, and lifecycle management of SIEM/logmanagement platforms• Worked with development teams to ensure that container images were builtsecurely, including the implementation of image signing and imagescanning processes• Conducted regular security assessments of containerized environments toidentify and address potential vulnerabilities• Led the implementation of Kubernetes security best practices, including theuse of network policies, role-based access control (RBAC), and secretsmanagement• Worked closely with infrastructure and operations teams to ensure thatsecurity solutions were compliant with frameworks and best practices• Promoted a shift-left security mindset by implementing security processeswithin the secure software development life cycle (SDLC)• Designed and implemented a golden image initiative to create a securityhardened baseline for cloud compute resources used in development andproduction environments

Unify ConsultingSecurity Consultant(Nov 2018 – Jan 2020)• Designed and implemented multi-cloud platform IAM architecture, policies,and authentication services• Setup monitoring and alerting for both infrastructure and applications tostreamline vulnerability management and remediation efforts• Collaborated with development, devops, and operations team to developstrategies to build infrastructure efficiently and securely within the cloudusing best practices within CIS and NIST framework• Led the integration of static application security testing (SAST) tools into thedevelopment pipeline to identify vulnerabilities in application code early inthe development process• Worked with development teams to implement remediation plans forvulnerabilities identified through DAST and SAST testing• Conducted regular security assessments of cloud-based applications toidentify and address potential vulnerabilities.

IT Security Engineer (Sep 2017 – Nov 2018)• Designed and deployed a secure network architecture in the cloud usingVPCs, subnets, and security groups• Led the implementation of encryption for data at rest and in transit acrossmultiple cloud environments• Conducted regular security assessments using tools such as Nessus and BurpSuite to identify vulnerabilities and mitigate risks• Worked with development teams to implement secure coding practicesand code reviews to ensure that applications were secure beforedeployment• Created and maintained documentation for all security-related processes,including incident response and disaster recovery plans• Trained team members on best practices for cloud security andparticipated in security awareness campaigns to promote a culture ofsecurity within the organization• Responded to security incidents and