Muhammad Usman

• Develop or recommend innovative technologies, design methodologies, and/or solutions to accomplish
complex objectives.
• Troubleshoot network & application related problems & provide support to other Technical staff.
• Design and maintain a data network environment, which includes configuration of network Hardware.
• Work closely with system administrators, network engineers and other members of the Operations
team to implement and maintain high quality data services for the data center.
• Provide leadership for project implementation, system configuration and design, training of other
technical staff.
• Manage network support staff to ensure excellent user support pertaining to the LAN. Maintain the
LAN/WAN using up to date tools and software to maximize up-time and to manage network
• Provide direction to an IT Security team in the areas of design and implementation of IT
• Deliver Strategic Vision as it relates to Information Security.
• Analyze & troubleshoot problems and recommend corrective actions.
• Evaluate different products in the area of Information Security.
• Run appropriate diagnostics for recovery and performance.
• Make formal presentations of findings, recommendations and specifications in formal reports.
• Ensure Operational Procedures and Documentation updated & well maintained to the current levels.
• Deployed, implemented, configured and managed Cisco FWSM and ASA Firewalls, Cisco IDS/IPS,
Cisco ISE, Paloalto, Fortinet Next Generation Firewall on high volume critical production
environment.
• Conducted and performed security review and testing of Cisco ASA, Cisco FWSM Firewalls, Cisco
Routers, Cisco WLANs Controllers/APs and Cisco Meraki Cloud WLANs based on NIST, SOX, ISO
27001 and PCI DSS compliance standard.
• Configured and performed automation, manual, dynamic and static testing of Cisco Devices and Web
Security Appliances with Perl and Java Script for security vulnerabilities and attacks mitigation.
• Configured and managed OSPF, BGP, HSRP, VRRP and ARP security vulnerabilities defense and
mitigation.
• Conducted and Performed Vulnerability Assessment and Penetration Test on the perimeter network,
systems and applications based on SOX, ISO 27001 and PCI DSS Compliance Standard.
• Deployed and implemented Wireshark, HPING, Retina Iris, Nessus, NMAP, Netflow, Device Engine
Firewall Analyzer and Solarwind for security vulnerability event monitoring, packet and traffic
analysis.
• Reviewed and analyzed application codes for Cross-Site Scripting, CSRF, SQL Injection, parameter
manipulation and brute-force attacks.
• Coordinated and managed Network, Systems and Application security vulnerability activities with
developers and engineers both in the US and India to evaluate and analyze software and application
codes security threats and risk.
• Analyzed and Coordinated security vulnerability activities with Cisco/PaloAlto/Fortigate Security
Incident Management Team on latest and emerging security vulnerabilities.
• Protected and defended against Web and Internet applications security vulnerabilities such as cross-site
scripting, CRF and SQL injection.
• Designed, recommended and built solutions and mitigation to address security issues, risk and
vulnerabilities.
• Configured, managed and implemented Aruba Wireless Controller, RAPs and Aruba CLEARPASS
Radius Authentication for Wireless Security management.
• Managed and implemented best practice firewall rules for Security Policy and Regulatory Compliance
Standard. And worked with Network Engineers on VLAN Switch, Router Routing Protocols and
Firewall rules and policies security.
• Configured, managed, monitored and analyzed IDS/IPS Signatures Attacks, Wire Shark, Firewall logs,
Systems, Applications and Security Event Incident Management Logs for comprehensive security
vulnerability monitoring.