Muhamad Syuhaimi Baharuddin Email & Phone Number

Kuala Lumpur, Malaysia

Preferred Support Engineer for high profile escalations. On call troubleshooting for high severity, complex technical issues for highly demanding / critical customers from APAC and US based region. Principal technical support for ProxySG, Symantec Web Isolation Products, Advanced Security Gateway, Content-Analysis Server, Malware Analysis & CacheFlow. Provide ad-hoc support / taking over case ownership for those Priority 1 issues which has been escalated to Management / Sales / Account Team. Managing customer expectation using technical and soft skills

Provide ad-hoc and on-going support (mentoring and collaborating) to other Engineers in terms of customer handling skills and technical guidanceListening to customer's technical issue, identify, analyze and provide recommendations based on the customer's requirement, infrastructure and their network behaviorCreate clear and concise documentation in the form of case management notes, technical tips and knowledge base articles to be used by the customer worldwide. More than 70 knowledge-based articles have been created and used by thousands of customers.

Kuala Lumpur, Malaysia

Provide frontline technical assistance to customers and partners in diagnosing and resolving software, hardware and networking issues related with BlueCoat products. Analyze and correlate network packet capture using wireshark / tcpdump, Eventlog, device settings, trace result, and debug log to identify the issue and advice/guide customer accordingly to resolve the case.

Manage internal IT project / implementing security solutions as per regulatory and internal policies requirement. Projects implemented:1. SIEM Solution POC (RSA Envision & IBM Qradar)2. Tripwire Implementation and Monitoring3. Netscaller SSL VPN with RSA 2 factor authentication4. Citrix App Firewall implementation on airasia.com, booking.airasia.com &etc.Performing technical assessment, internal pen-test / vulnerability scanning, prepare the documentation and proposed remedial action on the existing / new deployment. Identify, analyze and escalate malicious intrusion attempt, vulnerable software/system and security events. Follow up on the PCA findings as well.Developing, reviewing and updating information security policies, compliance procedures and internal controls (i.e. Incident response Policy, Network & Server Hardening, Security Monitoring, Escalation Procedure & etc.)

Kuala Lumpur, Malaysia

Managing Security Operation Centre (SOC) 24X7. Lead the Operations department which is a group of 16 IT security personnel. Monitoring IT operation process & operational capacity & procedures improvementLeadership and mentoring – Conducting technical training for ecop customer and internal GCC security analyst. Common topic in used includes TCP/IP for Intrusion Detection, Security Information Management, Enterprise Security Monitoring, Security Intrusion Analysis and Incident Handling, Snort IDS and Network traffic analysis using tcpdump 3rd level of escalation for incident handling, network protocol analysis, incident response, signatures fine tuning, and intrusion detection (IDS) management. Handling customer’s feedback & enquiries as well as other issues pertaining to the Information Security Surveillance Service (ISSS) such as security vulnerabilities and remediation techniquesCreating, reviewing & updating standard operating procedures, security policies & implementing best practice to be complied with ISO 27001:2005 standards. Document owner for all Operations Procedure with more than 4 years direct experience with ISMS implementationInterface between operation and other departments (Sales, Finance, Engineers/Consultant and R&D). Liaise closely with senior security engineer, security consultants and regional database administrator during adaptive phase of the projects, device fine tuning and process changes.

• Support and guide Security Analyst in analyzing and handling log events, customized procedures, liaise with engineers and consultants during adaptive phase of projects. • 24 x7 for all SOC service reference point (ESM application, log collector, various in-house application and Web). New Security Analyst orientation. Tracking of and deliverables to client & SOC production statistic.• Liaise with MSS engineers/consultant during ISSS device deployment and on site troubleshooting in order to reduce device down time. • 2nd level escalation for daily operation issues including incident analysis, troubleshooting and process changes. Review and quality control all ISSS internal processes and clients’ request.• Supervised and support more than 50 ISSS clients locally and world wide. Review alert fine tuning created by the security analyst. Reduce false positive and potential of false negativeTechnical Expertise:• A few years of experience in log analysis from various types of security devices from multiple vendors.• Knowledge, skills, and ability to configure and monitor intrusion detection systems read, interpret, and analyze network traffic as well as correlate it with related log files.• Intimately familiar with the nuts and bolts of Snort IDS rule fine tuning, testing, output analysis, tagging and etc• Widely experience in using various security tools (such as tcpdump, nmap, hping, scapy, wireshark) in analysing intrusion in order to identify abnormal stimulus response.

• 24X7 Information Security Surveillance; monitoring and analyse day to day alerts generated by client security devices to identify attempt of intrusion into client’s network.• Identify, analyse and escalate malicious intrusion attempt, vulnerable software/system and security events• Responds and liaise with clients promptly on security incidents handling and other monitoring security device related problem• Provides analysis and remedial action for vulnerable system and application to client’s security support staff to enhance client’s computing security posture.• Provides daily event report and security incidents report