Schlagwörter
Skills
I have over 12 years of experience in Information Security, Data Science, Networking Security and system support. Currently working as Security Architect, Senior Security Advisor for clients in Defense, Finance and Art Industries.
Hobbies: Motivational Speaking on Leadership & Equality topics, Teaching Krav Maga & Mixed martial arts.
- • Great skill set in Vendor Management, Asset Management and Documentation
- • Have Great skills in designing and training Security operation Centers (SOC) Both Event Monitoring teams and Incident response teams.
- • Have extensive experience in python programing for Machine Learning and Deep Machine Learning Solutions.
- • Have experience in designing and training Data Center Engineering and Operations.
- • Have experience with Infrastructure Management Services and Remote Network &Security Management in 24/7 production environment
- • Designing/ Deployment of Network Security and Network Solutions
- • Have experience in implementation of various compliances such as Cyber Essentials, PCI Data Security Standard (PCI DSS), ISO27001, SOX etc.
- • Have experience in Penetration Testing tools like NESSUS and NMAP.
- • I have experience working in implementing and monitoring different SIEM Tools such as SPLUNK (with Big Data & Hadoop), Arc Sight , RSA Envision, Lookwise, ELA, Loglogic, Q Radar
- • Have great experience in User Behavior Analysis Solutions (UBA), Role Base Access systems, Vulnerability Assessment, Risk Analysis, Email Security and Forensic analysis.
- • Experience on MacAfee End point Protection and Symantec Critical System protection maintenance and installation.
- • Have great experience in implementation and maintenance of Network management tools such as Cisco works, Cisco Prime, OpUtils, Microsoft SCCM , Cyber Ark’s PIM (Enterprise Password vault, Application Identity Manager , Discovery and Audit) etc
- • Strong experience with VMWare Products in both virtualization and cloud Computing Technologies.
- • Great knowledge on Cisco Unified Communications Manager (formerly Unified Call Manager), quality of service (QoS), gateways, gatekeepers, IP phones, voice applications, and utilities on Cisco routers and Cisco Catalyst switches.
- • I have extensively worked on Firewalls (ASA, Cisco Pix, Check Point, Netscreen, and Snort etc.), IDS, IPS, VPN Concentrators, F5 Load balancer and Cisco, Nortel, Juniper Routers and Switches.
- • Have experience with CITRIX NetScalar and Citrix Technologies (Cloud, Virtualization).
- • Has experience with Windows Server 2000, 2003, 2008, Active directories, DNS, IIS, etc.
- • Have experience in Linux and Unix operating systems.
- • Maintaining the Anti-virus Such as McAfee, Kaspersky and Symantec and also updating the patches
Projekthistorie
- Bachelor Degree in Computer Science & Information Security
- Certified Information Security Manager (CISM)
- Cisco Certified Network Administrator (CCNA)
- Cisco Certified Security Professional (CCSP)
- Microsoft Certified Professional (MCP)
- Certified Ethical Hacker
- EC Council - Certified Security Analyst
- Certified Security Auditor ISO / IEC 270001
- ITIL
- CISSP (In Progress)
Reisebereitschaft
Verfügbar in den Ländern
Deutschland, Österreich und Schweiz
Open for 80% travelling
Sonstige Angaben
Employment/Work Experience:
12 Different Clients (Part time – consulting) March 2015 – Till date
Security Architect & Chief Data Scientist
Deutsche Bank December 2015 – March 2019
Splunk Solution & Security Architect
Santander UK November 2013 – December 2015
Information Security Engineer
Astra Zeneca ISOC Team March 2012 – November 2013
Information Security Engineer
Master Card Sep 2011 – March 2012
Information Security Engineer
Hewlett Packard (HP) May 2010 – Aug 2011
Security Specialist
Was involved in projects for 3 Top Tier Multi National Banks simultaneously.
Bluepal Solutions March 2009 – April 2010
Network Administrator
EMRI March 2008 – Feb 2009
Systems Administrator
12 Different Clients (Part time – consulting) March 2015 – Till date
Security Architect & Chief Data Scientist
- • Worked on multiple Data Scientist roles building: • Build an Emotion Detection data model for a surveillance system which is 25000 Hours per day. Using IEMOCAP database to build a CNN based model for predicting facial emotions
- • Audio Cleaning/noise extraction from audio Surveillance using GAN (Generative adversarial networks)
- • Automatic Speech Recognition by Built kaldi based model for detecting English, German, Arabic speech
- • Medical Image recognition by building custom model for predicting Kidney stones, cancer, etc
- • Blocking a Bad IP-address.
- • Isolating an infected host (Server, PC, tablet etc.) from the network.
- • Stopping a phishing attack.
- • Stopping layer 4 & layer 7 DDOS attack’s.
- • Deactivating Users who’s credentials might be compromised.
- • Etc.…….
- • Managing Architecture/Design/Development of a new Splunk solutions in and around Europe for 17 clients.
- • Designed & Deployed Identity Access Management using User behaviors analytics (UBA) solutions.
- • Security monitoring & Infrastructure monitoring with Machine Learning tool kit.
- • Responsible for Automating and orchestrating of manual jobs which saved 100’s of man hours for SOC’s.
- • Automation and orchestrating helped the Vulnerability Management Teams, IAM Teams, End user security Teams & Network Security Operations.
- • Automation and orchestrating helped different teams to explore Adaptive response functionalities with their corresponding SIEM solutions.
Deutsche Bank December 2015 – March 2019
Splunk Solution & Security Architect
- • Responsible for Architecture and Design of a new Splunk 7.x infrastructure along with Splunk Enterprise Security for Information security department in the organization, reporting to the Head of the CISO Engineering team.
- • The magnitude of the Splunk Infrastructure is to ingest 2 TB of data per day.
- • Responsible end to end design of splunk solution, along with the design of data integration from 100 different types of data sources and is growing to be 300~ in future.
- • Responsible to talk and negotiate with the data source owners’ negotiating different methods of data collection with least impact to performance of the data source itself.
- • Responsible for supervision of the deployment of Splunk instance and delivery in less than 6 months.
- • Responsible for defining & Design KOP’s & Bringing Automation to replicate the existing vulnerability management processes, End user Security Processes, IAM & PIM Processes, & Network Security operations into Splunk.
- • Responsible for defining KOP’s to fit into company’s operation procedures to fit a decentralization model of roles and responsibilities.
- • Designing use cases to support threat analysts and SOC teams to help us the Splunk instance to its potential.
Santander UK November 2013 – December 2015
Information Security Engineer
- • Architect of a Vulnerability Management solution which helped my client in the Cyber Essentials Certification.
- • Responsible for migration & implementation of SPLUNK with Big Data Analytics.
- • Responsible for SIEM migration for Santander UK & Santander Spain from “Arcsight, Loglogic and RSA Envision” to SPLUNK.
- • Responsible for designing procedures for monitoring, trouble shooting and Maintenance of the SOC. Also responsible for training Security analysts to adapt to the new procedures and standards.
- • Worked exclusively on both MacAfee Endpoint Security and Endpoint Protection.
- • Maintenance of Cyber Ark’s PIM (Enterprise Password vault, Application Identity Manager , Discovery and Audit) and integration of all the devices and defining the role based access management system
- • Respond to all security breaches and other security incidents and coordinate with the respective teams to resolve the threats.
- • Designing and maintaining the best access management system, data and network security, backup and recovery.
- • Have great experience in managing the auditors. Every Security solution implemented in the past 1 year helped my client achieve an A+ in every external audit done in the last 2 months.
Astra Zeneca ISOC Team March 2012 – November 2013
Information Security Engineer
- • Responsible for managing end to end solutions for Arcsight and RSA Envision which includes monitoring, trouble shooting and Maintenance of the SIEM network and server Farm and also look into vulnerability assessment.
- • Implementing and maintenance of Cyber Ark’s PIM (Enterprise Password vault, Application Identity Manager, Discovery and Audit) and integration of all the devices and defining the role-based access management system
- • Respond to all security breaches and other security incidents and coordinate with the respective teams to resolve the threats.
- • Designing and maintaining the best access management system, data and network security, backup and recovery.
- • Ensuring all the security policies are maintained and updated according to the ISO standards.
- • Arcsight: Managing End to End Solutions for Total Arcsight Environment ,Managing and, ArcSight infrastructure.Troubleshooting the issues within ArcSight ,Managing ArcSight Loggers configuring ESM.Troubleshooting ESM(Enterprise Security Manager) ArcSight Express: correlation and log management
- • Perform forensic analysis on massive archives of log data for security incident and regulatory investigations. Incident management processes for close monitoring and correction of issues.
Master Card Sep 2011 – March 2012
Information Security Engineer
- • Responsible for managing end to end solutions for RSA Envision which includes monitoring, trouble shooting and Maintenance of the SIEM network and server Farm and also look into vulnerability assessment.
- • Respond to all security breaches and other security incidents and coordinate with the respective teams to resolve the threats.
- • Designing and maintaining the best access management system, data and network security, backup and recovery.
- • Ensuring all the security policies are maintained and updated according to the ISO standards.
Hewlett Packard (HP) May 2010 – Aug 2011
Security Specialist
Was involved in projects for 3 Top Tier Multi National Banks simultaneously.
- • Have good hands on experience in NESSUS and NMAP tools, which are used for penetration testing for our company audits.
- • Experience on Symantec Critical System protection Maintenance.
- • Have good hands on experience in Security monitoring tools like IPS Manager Express, Log logic, ACS.
- • Implementing and maintenance of Cyber Ark’s PIM (Enterprise Password vault, Application Identity Manager, Discovery and Audit) and integration of all the devices and defining the role based access management system
- • Log logic: Managing applications with management station, Managing log sources, Managing device types, Managing SSL Certification
- • Configuration and Management of VPN's Between Clients and our data Center.
- • Coordinate a team, which consists of four network engineers.
- • Cisco Unified Communications Manager (formerly Unified Call Manager), quality of service (QoS), gateways, gatekeepers, IP phones, voice applications, and utilities on Cisco routers and Cisco Catalyst switches
- • In-depth knowledge of LAN/WAN design and implementation
- • Tremendous experience with Cisco 700, 800, 1700, 2500, 3600, 7000 (7513) series routers, Pix and ASA Firewalls and VPN Concentrators. Strong experience with 1900, 2900, 3500, 5500 etc series switches, TCP/IP, VPN and Network Security.
- • Checkpoint(R65 & R75) and Nortel devices
- • Tremendous experience Juniper EX & QFX Series , ACX, BX, J Series, M Series routers , IDS, IPS, NETSCREEN, JUNOS and also have great knowledge on Juniper Switches
Bluepal Solutions March 2009 – April 2010
Network Administrator
- • Responsible for all network related changes.
- • Bluepal datacenter network infrastructure consists of Cisco routers, switches and ASA.
- • Configuration and Management of VPN's between Bluepal offices across the world.
EMRI March 2008 – Feb 2009
Systems Administrator
- • Remote Monitoring and Management of eight offices in INDIA.
- • Worked Windows 2000/2003 Operating System, Active Directory, and Messaging - Exchange 2000/2003/2007 Server, Networking
- • Extensive experience in managing critical online production servers of Active Directory, Exchange Server, DNS, DHCP, WINS, SharePoint server, MS Project Server, WSUS, SMS, SQL Server 2000/2005, Laptop’s and PC’s installation and Hardware configuration
- • Deployment and managing Windows 2003, 2005 ,2008clustering and Storage Area Network (SAN), Firewalls, DSL, VPN, RDP, Group Policies.
- • Configuration and deployment of Citrix XenApp or Presentation Server
- • Implementing Virtualisation solution using – VMWare ESX Server 3.X and Windows 2008 R2 Hyper-V.
- • Support to Desktops and Servers – Dell Power Edge, IBM, HP Blade Servers.
- • Have good experience in trouble shooting desktop issues.
- • Troubleshoot Server related issues and Monitoring the Network .
- • Maintaining the Anti-virus Such as Mcfee , Kaspersky and Symantec and also updating the patches
