Senior Security Engineer
Dimension Data
Total years of experience :16 years, 0 Months
I am working as Senior Security Engineer, focusing primarily on Security Deployments, Designs, Expansions, Migrations, Manage Services and Disaster Recovery.
Main Products I have expertise are as below :
* F5 (ASM, LTM, GTM, APM, AFM, IPI, Big IQ)
* ISE
* Cisco Routing, Switching, FTD and ASA
* Junipers SRX
* Palo Alto Firewall
* FortiGate Firewall
* Symantec End Point Protection Manager
* Symantec Secure Mail Gateway
* Symantec BlueCoat Proxy (ASG)
* FireEye NX
* InfoBlox
I was working as a Senior Security and Network Engineer (L-3) at AESCO, for the client Capital Market Authority (CMA). CMA is the heart of financial district in Kingdom of Saudi Arabia.
I am currently handling various Data Centers (designing, configuring and optimizing its traffic flow and security), new projects, critical issues related to Network/Security and performing Security auditing/Penetration testing for the enhancement, Governance and Threat Management and Optimization of Data Security and Integrity. Moreover, designing and configuring all new Network expansion/ Migration is also one of my responsibilities. Also defining new security policy with Governance Team is a part of volunteer service I do on weekly/monthly basis.
I am working as a Security Analyst in YASREF, Aramco. As an SOC Analyst, I had to monitor security events/incidents received from technology infrastructure (network, systems and applications) and then take appropriate action based on SOP’s and security procedures. Main duties include:
Knowledge of firewalls and intrusion prevention/detection systems.
Provide security and management of UNIX and Window systems.
Plan, design, and implement security measures to protect user data from hackers.
Understanding of common network services (web, mail, FTP, etc), network vulnerabilities, and network attack patterns.
Working on security assessment tools (NMAP, Airmon, RSA Secuity, Metasploit, Netcat, e.t.c.)
Knowledge of Systems Administration and in-depth knowledge of Windows and Linux servers.
Using DLP (Data Loss Protection) tools in order to monitor confidential data from getting stolen.
Using Archer ticket mechanism in order to assign tickets to the right department.
Responsible for providing feedback for tuning IPS/Firewalls and other network device policies based on security incident trends.
I was working as a Senior Network, System and Security Engineer in Ovex Technologies. Supervised and managed a staff of nine IT professionals at company’s Data Centres both in Islamabad and Lahore.
Job covered following roles:
Network Security (ASA 5510 and 5520)
Network Configuration
Cisco Routers (2800, 2960, 1800)
Cisco Switches (3750, 3550, 2960 POE)
Stacking Switches & Power Backup
Network Traffic Filtering
Ethical Hacking
Scanning Network Vulnerabilities
MPLS, VRF and L3-VPN Configuration
Creating IPSec and GRE Tunnels
NAT / PAT
IP SLA for Link connectivity
E-Ticketing (OTRS / Red Mine)
Network Stress testing and IDS
NMS (OpenNMS, Zenoss)
MS Server 2k3, 2k8 R2, 2012
PROXY / TMG / ISA / IPCOP
Physical & Remote Administration
Systems Monitoring
Virtualization (Hyper-V & VMware)
Configuring Cisco IP Phones (7940, 7960, 7961)
Accomplishments
● Configuring and Designing of overall Data Centre.
● Configuring ASA 5510 regarding packet inspection, ACL’s, route’s and police configuration (traffic counters).
● Configuring VLANS, STP, VTP, Static routes on over 17 devices.
● Deployment of Virtualization Technology (VMware with WSX server).
● Deployment of TMG Server on 2008 R2 Windows Server.
● Deployment of first Ticketing System (Red Mine) for day to day Technical issues.
● HHVM (Hip Hop Virtual Machine) Configuring Server with Facebook dedicated services for the App-Developers.
● Live health Monitoring of all Linux based Servers using Monitorix or OpenNMS.
● Deployment of OpenStack (Test bed)
I was working as aNetwork, System and Security Engineer in EES Headquaters. Duties Include Network Configuration, Maintenance, MS Server 2k8, physical and remote connectivity of servers.
Working my best to provide technical support in computer networks, general h/w & s/w failures, implementing and configuring new MS or Linux based Servers.
My role there as a Network Administrator was to monitoring LAN/WAN activity, T-shoot Network and Systems, back-up's and maintaining the overall systems.