Network Security Analyst
EM
مجموع سنوات الخبرة :21 years, 9 أشهر
Operational support and management for EM Network Security infrastructures, primarily responsibilities to include:
● Performing monitoring and troubleshooting support of multiple Firewall technologies, Intrusion Prevention System (IPS) Infrastructure and management of filter rule sets and Remote Access technologies
● Systematically analyse and diagnose network faults, sectionalize and drive resolution
● Ensure reliability, performance and availability of the Network Security solutions
● Investigate and resolve system and performance problems
● Respond and implement change in efficient manger to resolve critical incident and situation by using tools, processes and systems as appropriate.
● Participate in root cause analysis
● Work with vendor for problem resolution
● Document platform and process standards for ongoing operations
● Develop and maintain comprehensive documentation
● Standardize systems and continually improve process
● Provide user support services
● Perform other duties as required
● Participate in out of hours, on call rotation
● Experienced with Cisco switches and routers
● 'Day to Day': Implemented firewall change requests while managing multiple firewall environments including: 1000+ Nokia appliances running CheckPoint FW-1 NGX, and Cisco PIX firewalls.
● Solved complex network issues using Wireshark (Ethereal) and 'tcpdump'. Additional responsibilities, included maintaining and troubleshooting,
● Provided 1st level support and engineering for complex Nokia IPSOm, FW-1 NG and Cisco PIX related issues, for the i-Deal/Ipreo Nokia firewall infrastructure. Had access to corporate, and client, and worked maintaining and monitoring this infrastructure.
● Supported and maintained firewalls in various EDS clients in US and Europe on Cisco PIX, ASA, and Checkpoint.
● Implementation of Checkpoint Firewall 4.1 to protect and authenticate local-net and DMZ. Defined policies, NAT and anti-spoofing for internal, external networks as well as Internet gateways.
● Perform penetration testing on client networks ensuring the security of the public facing side of the networks. Also as a security consultant I travel to client sites and perform internal vulnerability assessments and provide suggestions to make the network a more secure productive environment.
● Internal and External vulnerability assessment and penetration testing including network, network perimeter and wireless.
● Network Security Architectural reviews, including network design, perimeter defenses, and intrusion detection/prevention systems.
● Information Security Management (Corporate/network policies, security awareness and training, and risk assessment and security management.
● Operating System Security (Vulnerability Scanning and Analysis, Vulnerability Root Cause Analysis, Patching and Configuration Control, and OS Hardening.
● Information security professional service consultant performing ISO 17799 based assessment, information security architecture and deployment of enterprise information security programs
● ICT Security Consultancy, Integration, Training, and Managed Services based projects deployment
● ICT Security Consultancy, Integration, Training and Managed Security Services technical proposals development
● Provision of assistance to marketing group in consultancy services sales, sales kit and training
● Development ad maintenance of Security Checklists, Baselines and Technical Training Materials
● Undertake Security awareness and updates dissemination
● Produce comprehensive reports on site security assessments, network vulnerabilities and configuration.
● Supported PETRONAS Bhd and it’s subsidiaries on Network Security
● Installed and maintained firewalls (Netscreen) in various Petronas and it's subsidiaries sites such as PETRONAS Twin Towers (PETT), Bangi Data Centre (BDC), Malaysia International Shipping Corporation Berhad (MISC), Floating Production Storage and Offloading (FPSO), Malaysia Marine and Heavy Engineering (MMHE), MISC Integrated Logistics Sdn Bhd (MILS), Putrajaya Holdings (PJH), Prince Court Medical Center and others
● Installed, configured and maintained Trend Micro Office Scan Anti Virus at Petronas, Petronas Dagangan Berhad (PDB) Myanmar and Osaka through vnc.
● Collect malware sample from infected user's machine before submit it to Trend Micro for further analysis
● Conduct investigation on malicious intent and security breach including virus outbreaks
● Forensic analysis
● Work with vendors technical support as required to resolve technical problems
● Administer 30+ servers running various implementations of Windows, HP-UX, , Linux Redhat and Solaris. Continually monitor systems to ensure their ability to provide ongoing and reliable service to minimize the impact of required down-time.
● Daily activities include the monitoring of abuse and network operations email, the monitoring and maintenance of email, www, ftp, DNS, DHCP and backup systems.
● Administer and Manage E-mail System (MS Exchange 2003 and Imail 7). Act as MS Exchange 2003 and Imail 7 Administrator as needed. This includes adding/removing/modifying user accounts and setting up and debugging Windows client machines.
● Install and configure new systems as needed including drive allocation, network services installation, security implementation and overall system testing.
● Administer Design and Manage 400+ Computer Networks running on Windows and Macintosh Operating System.
● Ensure the security of the systems on the network. Applying patches and fixes when necessary.
● Assist end users with troubleshooting Internet connectivity issues, network problems, email issues and answer general Internet-related questions. Operating systems supported range from Windows 98, 2000 and XP Professional as well as Macintosh.
● Troubleshoot problems over the phone, walking inexperienced users through troubleshooting procedures in a limited period of time.
● Configured ISDN Diva LAN modem for regional offices and Tourist Information Centres (TIC) to provide internet lines.
● Configured Streamyx lines for regional offices and TICs to provide internet line instead of ISDN line. Familiar with ZTE 831, SMC Barricade Router and able to configure others.