Muhammad Umar Sufiyan Khan

Supervisor South for the Cybersecurity Solutions Team, overseeing cybersecurity deployments across the South region, supervising and mentoring implementation teams, coordinating deployment activities with internal and customer stakeholders, and ensuring the successful, timely, and high-quality delivery of enterprise cybersecurity solutions

As an Information Security Engineer, I developed various virtual environments using VMware hypervisors and servers for deploying Kaspersky solutions. I engaged with clients by providing Proof of Concept (POC) and delivering presentations on Kaspersky products. Additionally, I successfully deployed Kaspersky solutions and conducted pre-sales activities for notable clients, including KIA Lucky Motors Corporation

• Delivered public seminars, technical workshops, and cybersecurity training sessions to clients and
internal teams.
• Specialized in demonstrating and deploying Endpoint Protection Platforms (EPP), Anti-Virus (AV),
and advanced detection technologies including EDR, NDR, XDR, and Sandbox environments.
• Led successful Data Loss Prevention (DLP) and Data Classification solution rollouts tailored to
enterprise compliance needs.
• Actively supported Governance, Risk Management, and Compliance (GRC) initiatives across
various sectors.
• Designed and implemented security controls for Cloud, Email, and Web Security infrastructures.
• Deployed Encryption solutions and administered System/Mobile Device Management using
platforms like IBM MaaS360.
• Hardened Windows and Linux operating systems as part of endpoint and server security optimization.
• Configured File Integrity Monitoring (FIM) for sensitive data protection and integrity tracking.
• Worked with SIEM solutions like IBM QRadar for log aggregation, real-time threat detection, and
incident response.
• Performed Vulnerability Assessment and Patch Management (VAPM) using tools such as Rapid7
Nexpose and Tenable Nessus.
• Secured enterprise networks through Network Segmentation, Firewall Policy Design, and Intrusion
Prevention configuration.
• Configured and managed Private Cloud Servers and Hybrid Cloud Security environments using
Kaspersky HCS.
• I engaged in technical public speaking, client presentations, and solution evangelism as a Subject
Matter Expert (SME) in cybersecurity.
• Conduct Sales team enablement sessions for cybersecurity solutions.
• Trained cybersecurity professionals in deploying cybersecurity solutions.

Leading cybersecurity projects, supervised deployments, and trained teams on enterprise security solutions. Built virtual environments using VMware for deploying Kaspersky solutions. Delivered POCs, conducted product presentations, and managed pre-sales activities. Hands-on experience with Kaspersky, IBM Security, Rapid7, and Forcepoint products across various enterprise environments.

• Acquired comprehensive Vulnerability Assessment and Penetration Testing (VAPT) skills and
techniques through hands-on practice and continuous learning.
• Conducted in-depth VAPT assessments on recognized bug bounty platforms such as HackerOne and
Bugcrowd, following industry-standard methodologies.
• Prepared, documented, and submitted detailed technical reports to the concerned
authorities, ensuring clear communication of risks and remediation steps.
• Performed specialized security testing on a wide range of websites, including high-risk crypto
platforms, to evaluate their security posture.
• Identified and validated critical vulnerabilities such as Rate Limiting flaws, Cross-Site Scripting
(XSS), Cross-Site Request Forgery (CSRF), SQL Injection, Clickjacking, and several other attack
vectors.
• Managed and guided a small team of junior testers, ensuring effective collaboration, quality delivery,
and adherence to testing standards.
• Successfully met organizational testing targets while also onboarding new clients and securing long
term engagement for ongoing security testing services.