Information Security Analyst

• Jun 2022 - Present

Information Security Analyst

• Feb 2021 - Jun 2022

Central Bank of Iran (consulting role through ISC)”Responsibilities:Technical handling of ongoing security projects in CBI financial services.Researching on recent InfoSec technologies, standards and best practices related to banking sector.Working on vulnerability management and threat intelligence across the national banking network.Working in security evaluation lab in CBI with security tools.Researching on Fraud detection techniques in the industry.Preparing a set of requirements for mobile payment applications security (based on MASVS, NIST 800-53, PA-DSS and national guidelines) and evaluating fin-tech apps with them.Security evaluation of payment products (Web applications and mobile applications) based on national protection profiles (CC).Performing vulnerability assessment and penetration test in CBI network and applications.

Network and Cyber Security Specialist

• Mar 2017 - Feb 2021

Responsibilities:Working as a security consultant in MCI (the first mobile operator in Iran).Evaluating and auditing security checklists on clients assets. Making security checklists for different devices and platforms that they didn't have one based on their guidelines.Sending CERT notices to our clients and guide them to be secure about vulnerabilities.Working on information gathering in cyber attacks of MCI.Consulting in ICS (Industrial control system) security projects in industrial plants (Power & Petroleum and Steal)Vulnerability Assessment (with tools like NMAP, Tenable Nessus, IBM AppScan, accunetix ,..)Security Auditing (based on CIS and STIG and vendor checklists, NIST CS framework, and IEC 62443 (for industrial control systems) standard)R&D (on industrial protocols like IEC 101/104, DNP3, Modbus and Profinet)Reporting and DocumentationResearch and Development on best tools in the industry, using Gartner and other reliable sources.

Reasercher

• Sep 2014 - Feb 2017

Responsibilities:Working on Master thesis (Improvement of Detection of Smartphone Botnets Using Host and Network-Based Analysis)Learning about tools and methods for Android Application static analysisWorking with WEKA for machine learningJAVA programming and SQLTraffic analyzing with tpacketcapture and WiresharkPublishing a paper in ICEE2019 (link in project section)

Operating System lab Instructor

• Jan 2015 - Jun 2015

Responsibilities:Teaching Linux operating system structure and bash scripting and programming in that to undergraduate students for one semester.

Cyber Security Specialist

• Jun 2015 - Jun 2016

Responsibilities: Finding existing vulnerabilities in industrial control systems and describing threats and attack vectorsFinding APTs and malware related to ICS( industrial control system) and studying their malware analysis reports Java programming for the scanner that we developed in our team (log component, dynamic scan component, and enhancing performance) Responsibilities: Finding existing vulnerabilities in industrial control systems and describing threats and attack vectorsFinding APTs and malware related to ICS( industrial control system) and studying their malware analysis reports Java programming for the scanner that we developed in our team (log component, dynamic scan component, and enhancing performance)

Information Security Officer

• May 2012 - May 2014

Responsibilities:Applying the CIS security checklist for CENTOS and Apache on some servers and report the result.Learning about OWASP TOP10 and applying OWASP test cases of these attacks. Responsibilities:Applying the CIS security checklist for CENTOS and Apache on some servers and report the result.Learning about OWASP TOP10 and applying OWASP test cases of these attacks.