Syed Muhammad Talha Email & Phone Number

Riyadh, Sa

Riyadh, Saudi Arabia

● Carried out multiple IT and Cybersecurity Audits on various clients. These audits not only identified control weaknesses but also highlighted related risks and improvement areas.● Performed configurational audits for different clients of office 365, Exchange Server, Azure Active Directory, Firewalls and Office 365 by giving leverage to CIS Benchmark.● Performed comprehensive Vulnerability Assessment and Penetration Testing of web and android based applications.●… Show more ● Carried out multiple IT and Cybersecurity Audits on various clients. These audits not only identified control weaknesses but also highlighted related risks and improvement areas.● Performed configurational audits for different clients of office 365, Exchange Server, Azure Active Directory, Firewalls and Office 365 by giving leverage to CIS Benchmark.● Performed comprehensive Vulnerability Assessment and Penetration Testing of web and android based applications.● Carried out multiple IT / CS Audits as part of the Internal Audit team on various clients. These audits not only identified control weaknesses but also highlighted related risks and improvement areas.● Executed multiple IT audit engagements, as on-field executer in which I was involved in auditing multiple IT General Assessment areas which includes Incident Management, Change Management, Problem Management, Access Management, IT Asset Management, Data Center Review, IT DRP and BCP Review.Executed multiple cybersecurity audit engagements involved in auditing multiple cybersecurity assessment areas which include Email and Web Protection, Network and Security Management, Data Protection, Cryptography and Key Management, Vulnerability Management and Penetration testing, Cybersecurity Event Log Management, Cybersecurity Incident and Threat Management, Endpoint Security and Third Party Cybersecurity Review.● Conducted security risk assessments related to IT/CS for various clients, delivering comprehensive risk registers inclusive of likelihood assessments and mitigation strategies.● Performed SAST and DAST analysis● Performed secure code reviews for a range of web-based and android applications and provided comprehensive recommendations to the developers to effectively address these vulnerabilities to enhance the overall security posture of the applications.● Performed compromise assessments on multiple clients using automation tools and manual approach to detect and IOCs Show less

Karāchi, Sindh, Pakistan

● Implemented SonarCloud and integrated it with CI/CD pipelines for secure code review.● Conducted thorough Vulnerability Assessments and Penetration Tests on various web applications. and collaborated with developers to formulate effective solutions for mitigating identified vulnerabilities.● Performed secure code review of web applications based on javascript frameworks, java and .NET technologies.● Performed security by design architecture of network architecture… Show more ● Implemented SonarCloud and integrated it with CI/CD pipelines for secure code review.● Conducted thorough Vulnerability Assessments and Penetration Tests on various web applications. and collaborated with developers to formulate effective solutions for mitigating identified vulnerabilities.● Performed secure code review of web applications based on javascript frameworks, java and .NET technologies.● Performed security by design architecture of network architecture diagram and suggested security controls.● Conducted security awareness and training with all employess to aware them regarding different social engineering attacks.● Performed API security testing.● Performed gap analysis and worked on the implementation of ISO-27001.● Draft security best practices and guidelines for the Development and DevOps team● Assist with threat modeling, secure architecture and design review, and configuration hardening● Performed SAST and DAST analysis● Provide support to the Development and DevOps team for risk remediation and mitigation Show less

Pakistan

● Worked on IRIS 3 SUITE .NET Webforms● Worked on IRIS5 SUITE .NET MVC● Created RestFul APIs for HBL and BRAC bank (IRIS5)● Worked on ABU Mandate project for UBL● Successfully integrated NIFT with IRIS3 SUITE for MCBI● Resolved live issues and bugs in existing projects for UBL, HBL, Bank of DOHA ,KMBL,BRAC bank, MCBI

● Development of Global trading Platform (GTP) using ASP.NET Core.● Development BackOffice with MT5 Trading Platform using ASP.NET MVC.● Development of Direct Funds Bank Integration with Meezan Bank using VB.Net and SOAP API.● Development & Maintenance of Exchange Trading System using .NET and Oracle 11g.● Development of Client Portal (CSR) using VB.Net.● Development of Murabaha using C# Asp.Net.● Development trader Account Management System (TAMS) using VB.Net.●… Show more ● Development of Global trading Platform (GTP) using ASP.NET Core.● Development BackOffice with MT5 Trading Platform using ASP.NET MVC.● Development of Direct Funds Bank Integration with Meezan Bank using VB.Net and SOAP API.● Development & Maintenance of Exchange Trading System using .NET and Oracle 11g.● Development of Client Portal (CSR) using VB.Net.● Development of Murabaha using C# Asp.Net.● Development trader Account Management System (TAMS) using VB.Net.● Revamping of existing system with new features.● Creating Synchronization Processes between different Platforms with data mapping according to requirements.● Secured web applications from SQL Injection by using stored procedures and parameterized queries to minimize cyber attacks● Revamping and Migration of Exchange trading System on new framework and making it responsive using bootstrap.● Attend Meetings and take part in technical discussions which focus on the understanding of business requirements● Perform analysis, R&D (Research & Development), identify technology limitations and offer ideas to help the team in devising an appropriate solution that meets the requirements. Show less

-Developed Pharmacy system using Asp.Net & SQL Database

Ms, Information Security

Bs, Software Engineering

Matriculation, Computer Science