Nayeem Ahmed

• Reporting to C Level and Leading Security team, Handling Hybrid Cloud
Environment security by using hybrid supportive tools with IaC, PaC Policy as
Code, SaC Security as Code.
• Expertise and intimate familiar with MAS, BNM, ISO127001, and NIST/CIS
Frame works and compliance benchmark experience and SIEM tools (Qradar,
Spunk) for Security Incident.
• Manual & Automatic Secure code review, Basic Development experience in
Python Django, ReactJs l, Automation in Cloud and DevSecOps automation
with AI Agents and AI LLM implementation for OWASP prompt updated scan in
the SDLC and CI/CD to Secure it.
• Web, Mobile Application and Infrastructure security Vulnerability Assessment
and Penetration testing, Report generation and reporting to CISO and
vulnerability management thats includes Threat Modelling (STRIDE, Tree flow).
• Hands on expertise in AWS and Azure DevOps, SAML SSO, MFA, Micro Services,
Security services and Platform tools like cloud formation, Lambda, private end
Point connections and VPN.
• Maintenances and Handling Attack surface management(ASM), WAF
provisioning and fine tuning the policies, PKI and Certificate lifecycle
management and tracking expiry and renewals to make sure services are safe and
secure, PAM360 and SOC services of the clients, Incident handling in cloud
platform environment.
• Learning…

• Securing SDLC (Secure Software Development) and Implementing Cloud
Security Best Practices, OWASP SAMM, Leverage Integration to Make
Application Security a Natural Part of the (SDLC) tools like HCL AppScan, other
SAST, DAST and SCA, also with Checkmarkx, Semgrep, Snyk, Sonarqube nessus etc on
the Jenkins, GitLab with JFrog artifactory to secure Software Development Life Cycle.
• Working on Have Hands on
Experience on Ability Build an Automatic Incident Response and Alerts
Automation Scripting familiar with various security standards like more.
• Experience in handling Security gates or check like MFA and VPN
implementation for secure access, intimate exposure experience in
Configuration review experience in Network, Firewall, Databases and
Cloud(CSPM) configuration review.
• As a Custom Code Security and vulnerability management: Security by
implementing an Open Sources, Developing a SAST on a Source Code Files, DAST
on a Running Application to Continuously Monitor Software for Vulnerabilities
throughout Development and various Security Jobs integration with CI/CD
Pipeline(AWS, GitLab, Jenkins, etc).
• Do have good expertise in handling stakeholders to get work done in more
feasible way and without disrupting their sprint or workflows in priority
and Guidance and supporting stakeholders to understands the Security terms
and discovered security findings to make sure their in way to patch and
remediate findings to safeguard an organization from potential threat and
risks.
• Automation: Scripting Automation on Cloud Environment (Aws Lambda) and
Automate Security as Part of the Development and Testing Process to Make
Things Get Handy in Management Level. Also Having Hands on Experience in
Python, Powershell, bash and YAML Scripting.

• Worked experience in Fintech Prudential from United Kingdom Banking
industry.
• Maintaining and Scaling the Security Over the Software Development and Source
Code Management. Making Possible Automation on Cloud Environment(Cloud
Formation).
• DevSecOps pipeline Implementation in Jenkins and GitLab pipeline, Best
Practice of using the security software, hardware, techniques, best practices and
procedures to protect computer applications from external security
threats.
• Automate, monitor and apply security at all phases of software lifecycle and cloud
environments, knowledge of least privilege methodology with security rights,
permissions and groups, experience of securing cloud environment with AWS
• Vulnerability Assessment and Vulnerability management: Using tools to do
a vulnerability assessment and pentest on the domain and remediation
recommendation and followups.

• Architecting, Deploying, Configuring, and Supporting detection technologies.
Source Code review with SAST (SonarQube) and DAST with Zap, Nessus,
qualisys etc.