Super-Resume: Resume

Your Name

Information Security Analyst

Karachi, Sindh

your.name@example.com

111-222-3333

www.your-website.com

Summary

I am an information security analyst with high levels of expertise in penetration testing of web applications and mobile applications along with the penetration testing of network infrastructure and network devices. Incident response and handling is part of my daily work, and I also play an important role in fine-tuning and optimizing SIEM (Qradar).

Core Competence

Web application vulnerability assessment and penetration testing covering OWASP Top 10.
Mobile Application and network penetration testing.
Hands-on experience with commercial and open-source application and infrastructure security testing tools including Metasploit, Burpsuite, IBM App scan, Netsparker, Nessus etc.
Incident reporting and handling.
Log Monitoring / Analysis.

Certifications

Cisco Certified networking associate (CCNA 423514181459COBK)
CEH training completed (from EC council’s authorized instructor)

Organizations

Meezan Bank Ltd

Xper2Go Inc

Work Experience

Information Security Analyst

Meezan Bank Ltd, Karachi, Sindh

Aug 2017 – Current

Monitor logs and investigate security events and alerts, taking in account system and application logs, network security appliances, user activity, and netflow data.
Analyze Fire-eye event in SIEM and fire-eye dashboard which includes NX, HX, EX and CM.
Raise incident tickets and follow-up with internal and external teams, owning issues until closure or escalation.
Perform first-line security incident response, providing clear handover information and advice when major incidents are escalated.
Provide feedback to the security operations manager and CISO to tune SIEM alerts and to improve the effectiveness of SOC runbooks.
Responsible for day to day management of security incident and event management system.
Perform deep package inspection, review system logs and correlate network data to identify security incidents.
Review incident data and provide root cause analysis and recommendations on how to prevent future occurrences.
Build and prepare executive dashboards to communicate risks and incidents across the organization.
Manage daily operations of (SOC /Logs) such as web application firewalls, multi-vendor firewalls, multi-vendor intrusion prevention systems, IPS, multi-vendor anti-malware products, proxy gateways, email gateways and SIEM tool, Analytics appliances and other network and security management systems.
Identify vulnerabilities, recommend corrective measures and ensure the adequacy of existing information security controls.
Analyze security incidents and present monthly /quarterly / yearly reports to CISO.
Access control on server farm and other IT services.
Responsible for blocking anti phishing web pages impersonating MBL Brands through “CTM-360” and “PTCL - Etisalat”.
Review IT projects with respect to security concerns.
Development of network security standards, policies and practices.
Coordinate internal/external/SBP IS Audits.
Provide information security awareness to end users.

Network Support Engineer

Xper2Go Inc., Karachi, Sindh

Mar 2017 – Jul 2017

Providing complete network support to hospitality industry mostly located in the U.S.
Deployment of network devices via webex (including various routers and switches).
Monitoring the logs of all deployed network devices.
Provide network architecture to customers.
Provided support over the phone to corporate customers.

Projects

Meezan Bank mobile banking application pentest.
Meezan Bank Internet banking (Web) pentest.
Meezan Bank network infrastructure pentest.
Deployment of IBM privilleged identity management.

Education

BS Computer Science

Sir Syed University Of Engineering & Technology, Karachi, Sindh

2013 – 2016

Higher Secondary School Certificate (HSSC)

Al-Aqeeq International College, Medina, KSA

2010 – 2012

Secondary School Certificate (SSC)

Al-Aqeeq International School, Medina, KSA

2008 – 2010

Skills

Ability to meet deadlines.
Punctuality.
Presentation.
Ability to perform under pressure.
Team player.

Languages

Urdu (Native).
English (Full professional proficiency).
Arabic (Professional working proficiency).

Interests

Bug bounty hunting.
Swimming.
Cricket.
Video games.

Personal Information

Date of birth: 27th December 1993.
Marital status: Single.
Religion: Islam.