Waqar Ahmad

for the main Web DLP System at TISO-CTS.
✓ Implemented DLP security policies, analyzed DLP incidences,
Developed & documented the methodologies, BAUs & Run books
for DLP exceptions. Raised & got approved DLP exceptions & fine-
tunned and implemented DLP policies in secured Production
environment.
✓ Led the DLP Upgrade project for a secure Web Content System in
the Bank. Trained the CTS team for DL incidences investigations
✓ Worked in Cyber Technology Support (CTS) team on EDR
solutions like, TrendMicro, Symantec End Point, McAfee
Endpoint Protection (ePO), RSA ECAT & provided technical
support to SOC team.

Analyzed potential, successful, and unsuccessful intrusion attempts
and compromises thorough reviews and analyses of relevant
offences.
✓ Performed security analysis of network activity, monitors and
evaluates network flow on Alien Vault SIEM, Wireshark &
TCPDump for anomalies and detect malicious network activity.
✓ Took part in deployment of OSSEC (Host Based Intrusion
Detection System) for security monitoring, effective threat
detection, incident response and compliance.

Worked for a Managed Security Services Provider (MSSP) Ebryx Ltd.
in SOC (Security Operations Center) on 24x7 shifts basis.
✓ Conducted investigation & mitigation of security incidents from
the network SIEMs Qradar, Elk (Elastic Search, Logstash, Kibana)
Stack & Wazuh open-source security solution.
✓ Provided strategic direction & consultation on Cloud Security &
Analyzed, escalated, and assisted in remediation of critical
security incidents in cloud using cloud security platforms like AWS
Security, AWS GaurdDuty, AWS CloudTrail, AWS SecurityHub,
GCP Security and Cloudflare.
✓ Communicated with MSSP’s Clients regarding the severity of the
threat and recommendations for remediation to the customer
and other cyber security personnel through written and verbal
media.