Experience

ECOVIS Saudi Arabia (ECOVIS AL SABTI)

• Saudi Arabia
• Financial Services
• 100 - 200 Employee

• Senior Consultant Technology & Cyber Security Risk Advisory

  • Jan 2023 - Present

  • Carried out multiple IT / CS Audits as part of the Internal Audit team on various clients. These audits not only identified control weaknesses but also highlighted related risks and improvement areas. • Executed multiple engagements, as on-field executer, and lead projects in which I was involved in auditing multiple IT General Assessment areas which includes Incident Management, Change Management, Problem Management, Access Management, IT Asset Management, Data Center Review, IT DRP and BCP Review. • Performed and lead the compliance audit of National Cyber Security Authority - Cloud Cybersecurity Controls or Essential Cybersecurity Controls at the Saudi Business Machines (SBM). • Acted as the lead project executioner in performing technology audits of the Technology and Business Application Departments for the Capital Market Authority (CMA) and added value to the organization by highlighting multiple gaps in their operational processes. • Performed audits of IT and Security at Soudah Development Company (SDC). • Led and executed the delivery of the IT Governance audit at Gulf Payment (GPC) that facilitates as a payment provider across all countries in the middle east. • Assessed the gaps and control weaknesses with regards to external and internal projects during the audit of the Project Management Office in STC Specialized. Show less



K-Electric

• Pakistan
• Oil and Gas
• 700 & Above Employee

• Assistant Manager Cyber Security & Risk Management

  • May 2021 - Jan 2023

  • Reviewing Information Security Policies, Procedures, and Guidelines. • Investigate security breaches including forensics, mitigation with Incident Response team. • Assist in fixing detected vulnerabilities to maintain a high-security standard (TVM, Change Management). • First ever (Vectra AI – Network Detection & Response) deployment , configuration in Pakistan. • KE Internet Facing Applications deployment behind Barracuda Web Application Firewall. • WAF Configuration on Azure portal / WAF Security Policies Review. • Working on Malware Information Sharing Platform, as well as Group – IB Threat Intelligence Platform. • Working on Trend Micro EDR, XDR, HES, / Tenable Nessus / Nipper for security configuration review. • Infoblox DNS Security Policies Management. • Leading SOC team with respect to WAF / DNS / NDR Alerts Investigation. • Vulnerability Assessment of applications / servers [Net Sparker, Metasploit, Kali Linux]. • Application code review with respect to coding best practices. • Dealing with third party vendors for internal, external VAPT. • Planning & development in process to work on OT side across KE generation plant infrastructure. • Identifying RISK across K.E wide I.T Infrastructure. • Assist in Information Security Awareness Program in line with ISO 27001 • Perform analysis, R&D (Research & Development), identify technology limitations and offer ideas to help the team in devising an appropriate solution that meets the requirements. Show less



Silkbank Limited

• Pakistan
• Banking
• 700 & Above Employee

• Information Security Analyst

  • Jun 2020 - May 2021

  • Worked on SIEM (IBM-QRADAR) for day-to-day SOC monitoring. • Vulnerability Assessment / Penetration testing of applications or assets through Rapid 7 tools. • Bash Scripting for security task automation. • Manage user rights, passwords of all servers across branches of Silk Bank in Pakistan. • Dealing with third party vendors for external VAPT [White / Black Box Testing] as per State Bank of Pakistan guidelines. • Perform analysis, R&D (Research & Development), identify technology limitations and offer ideas to help the team in devising an appropriate solution that meets the requirements Show less



CYBERNET

• Pakistan
• Information Technology & Services
• 700 & Above Employee

• Cloud Infrastructure Engineer

  • Mar 2019 - Jun 2020

  • Expertise on Linux flavors (Centos, Red hat, Ubuntu) • Working with Cloud Stack to administer VMs, VPCs, and VPN • Penetration Testing / Vulnerability assesment of cloud applications • Working on Open Stack to deploy Cloud infrastructure using open stack heat module API • Working on Scripting / Automation tools like Ansible to automate VM configuration and deployments • Implementation of information security in collaboration with Info sec team and International vendors (Akamai, DOSarrest) • Knowledge of Dockers, Kubernetes, CI /CD Pipelines • DNS / Web server’s configuration and management • Work in software, hardware infrastructure (Server), and Storage • Worked on different hypervisors: XenServer, VMware. • Layer 2 support of cloud infrastructure & email servers. • Working on different open source software solutions • Email server (Postfix, Mail Enable and Axigen) configuration and management. • Working with Centralized logging applications such as Log Analyzer Show less



Pakistan Mercantile Exchange Limited - PMEX

• Pakistan
• Financial Services
• 1 - 100 Employee

• Associate Software Engineer

  • Jun 2018 - Mar 2019

  • Development & Maintenance of Exchange Trading System using .NET and Oracle 11g • Development of new modules in PMEX Client Portal and Trade Account Management System. • Refactoring of existing system with new features. • Creating Synchronization Processes between different Platforms with data mapping according to requirements. •Attend Meetings and take part in technical discussions which focus on the understanding of business requirements •Perform analysis, R&D (Research & Development), identify technology limitations and offer ideas to help the team in devising an appropriate solution that meets the requirements. Show less