"Motivational Speaker", "Cloud Security Architect" ,""Security Architect" "Data Scientist" & Advisor for clients in Defense,...

5/2005 – offen

• Have extensive experience in python programing for Machine Learning and Deep Machine Learning Solutions.
• Have experience architecting and designing, Hybrid & On-site Cloud Solutions solving complex business problems
• Great skill set in Vendor Management, Asset Management and Documentation
• Have Great skills in designing and training Security operation Centers (SOC) Both Event Monitoring teams and Incident response teams.
• Have experience with Infrastructure Management Services and Remote Network &Security Management in 24/7 production environment
• Designing/ Deployment of Network Security and Network Solutions
• Have experience in implementation of various compliances such as Cyber Essentials, PCI Data Security Standard (PCI DSS), ISO27001, SOX etc.
• Have experience in Penetration Testing tools like NESSUS and NMAP.
• I have experience working in implementing and monitoring different SIEM Tools such as SPLUNK (with Big Data & Hadoop), Arc Sight , RSA Envision, Lookwise, ELA, Loglogic, Q Radar
• Have great experience in User Behavior Analysis Solutions (UBA), Role Base Access systems, Vulnerability Assessment, Risk Analysis, Email Security and Forensic analysis.
• Experience on MacAfee End point Protection and Symantec Critical System protection maintenance and installation.
• Have great experience in implementation and maintenance of Network management tools such as Cisco works, Cisco Prime, OpUtils, Microsoft SCCM , Cyber Ark’s PIM (Enterprise Password vault, Application Identity Manager , Discovery and Audit) etc
• Strong experience with VMWare Products in both virtualization and cloud Computing Technologies.
• Great knowledge on Cisco Unified Communications Manager (formerly Unified Call Manager), quality of service (QoS), gateways, gatekeepers, IP phones, voice applications, and utilities on Cisco routers and Cisco Catalyst switches.
• I have extensively worked on Firewalls (ASA, Cisco Pix, Check Point, Netscreen, and Snort etc.), IDS, IPS, VPN Concentrators, F5 Load balancer and Cisco, Nortel, Juniper Routers and Switches.
• Have experience with CITRIX NetScalar and Citrix Technologies (Cloud, Virtualization).
• Has experience with Windows Server 2000, 2003, 2008, Active directories, DNS, IIS, etc.
• Have experience in Linux and Unix operating systems.
• Maintaining the Anti-virus Such as McAfee, Kaspersky and Symantec and also updating the patches


Employment/Work Experience:

12 Different Clients (Part time – consulting) March 2015 – Till date
Cloud Architect, Security Architect & Chief Data Scientist

• Worked on Multiple Cloud Security Architect Roles:
• Migrating existing solutions to AWS, Google Cloud & Oracle Cloud Solutions.
• Architected and Designed Hybrid Infrastructure solutions supporting Private cloud, Public Cloud, On-site & SaaS (Software as a Service).
• Have experience with Cost Optimized Certificate management, PKI, IAM, DDOS, Network Security, Compliance, Log Management & SIEM services in AWS & Google Cloud to support hybrid/dedicated cloud setup’s
• Have proven experience in Automation of OPS, DEVOPS & SOC services.
• Worked on multiple Data Scientist roles building:
• Build an Emotion Detection data model for a surveillance system which is 25000 Hours per day. Using IEMOCAP database to build a CNN based model for predicting facial emotions
• Audio Cleaning/noise extraction from audio Surveillance using GAN (Generative adversarial networks)
• Automatic Speech Recognition by Built kaldi based model for detecting English, German, Arabic speech
• Medical Image recognition by building custom model for predicting Kidney stones, cancer, etc
• Worked as a Security Architect & Splunk Architect:
• Managing Architecture/Design/Development of a new Splunk solutions in and around Europe for 17 clients.
• Designed & Deployed Identity Access Management using User behaviors analytics (UBA) solutions.
• Security monitoring & Infrastructure monitoring with Machine Learning tool kit.
• Responsible for Automating and orchestrating of manual jobs which saved 100’s of man hours for SOC’s.
• Automation and orchestrating helped the Vulnerability Management Teams, IAM Teams, End user security Teams & Network Security Operations.
• Automation and orchestrating helped different teams to explore Adaptive response functionalities with their corresponding SIEM solutions.
• Blocking a Bad IP-address.
• Isolating an infected host (Server, PC, tablet etc.) from the network.
• Stopping a phishing attack.
• Stopping layer 4 & layer 7 DDOS attack’s.
• Deactivating Users who’s credentials might be compromised etc.…….


Deutsche Bank December 2015 – March 2019
Splunk Solution & Security Architect

• Responsible for Architecture and Design of a new Splunk 7.x infrastructure along with Splunk Enterprise Security for Information security department in the organization, reporting to the Head of the CISO Engineering team.
• The magnitude of the Splunk Infrastructure is to ingest 2 TB of data per day.
• Responsible end to end design of splunk solution, along with the design of data integration from 100 different types of data sources and is growing to be 300~ in future.
• Responsible to talk and negotiate with the data source owners’ negotiating different methods of data collection with least impact to performance of the data source itself.
• Responsible for supervision of the deployment of Splunk instance and delivery in less than 6 months.
• Responsible for defining & Design KOP’s & Bringing Automation to replicate the existing vulnerability management processes, End user Security Processes, IAM & PIM Processes, & Network Security operations into Splunk.
• Responsible for defining KOP’s to fit into company’s operation procedures to fit a decentralization model of roles and responsibilities.
• Designing use cases to support threat analysts and SOC teams to help us the Splunk instance to its potential.

Santander UK November 2013 – December 2015
Information Security Engineer

• Architect of a Vulnerability Management solution which helped my client in the Cyber Essentials Certification.
• Responsible for migration & implementation of SPLUNK with Big Data Analytics.
• Responsible for SIEM migration for Santander UK & Santander Spain from “Arcsight, Loglogic and RSA Envision” to SPLUNK.
• Responsible for designing procedures for monitoring, trouble shooting and Maintenance of the SOC. Also responsible for training Security analysts to adapt to the new procedures and standards.
• Worked exclusively on both MacAfee Endpoint Security and Endpoint Protection.
• Maintenance of Cyber Ark’s PIM (Enterprise Password vault, Application Identity Manager , Discovery and Audit) and integration of all the devices and defining the role based access management system
• Respond to all security breaches and other security incidents and coordinate with the respective teams to resolve the threats.
• Designing and maintaining the best access management system, data and network security, backup and recovery.
• Have great experience in managing the auditors. Every Security solution implemented in the past 1 year helped my client achieve an A+ in external audit.

Astra Zeneca ISOC Team March 2012 – November 2013
Information Security Engineer

• Responsible for managing end to end solutions for Arcsight and RSA Envision which includes monitoring, trouble shooting and Maintenance of the SIEM network and server Farm and also look into vulnerability assessment.
• Implementing and maintenance of Cyber Ark’s PIM (Enterprise Password vault, Application Identity Manager, Discovery and Audit) and integration of all the devices and defining the role-based access management system
• Respond to all security breaches and other security incidents and coordinate with the respective teams to resolve the threats.
• Designing and maintaining the best access management system, data and network security, backup and recovery.
• Ensuring all the security policies are maintained and updated according to the ISO standards.
• Arcsight: Managing End to End Solutions for Total Arcsight Environment ,Managing and, ArcSight infrastructure.Troubleshooting the issues within ArcSight ,Managing ArcSight Loggers configuring ESM.Troubleshooting ESM(Enterprise Security Manager) ArcSight Express: correlation and log management
• Perform forensic analysis on massive archives of log data for security incident and regulatory investigations. Incident management processes for close monitoring and correction of issues.

Master Card Sep 2011 – March 2012
Information Security Engineer

• Responsible for managing end to end solutions for RSA Envision which includes monitoring, trouble shooting and Maintenance of the SIEM network and server Farm and also look into vulnerability assessment.
• Respond to all security breaches and other security incidents and coordinate with the respective teams to resolve the threats.
• Designing and maintaining the best access management system, data and network security, backup and recovery.
• Ensuring all the security policies are maintained and updated according to the ISO standards.

Hewlett Packard (HP) May 2010 – Aug 2011
Security Specialist

Was involved in projects for 3 Top Tier Multi National Banks simultaneously.

• Have good hands on experience in NESSUS and NMAP tools, which are used for penetration testing for our company audits.
• Experience on Symantec Critical System protection Maintenance.
• Have good hands on experience in Security monitoring tools like IPS Manager Express, Log logic, ACS.
• Implementing and maintenance of Cyber Ark’s PIM (Enterprise Password vault, Application Identity Manager, Discovery and Audit) and integration of all the devices and defining the role based access management system
• Log logic: Managing applications with management station, Managing log sources, Managing device types, Managing SSL Certification
• Configuration and Management of VPN's Between Clients and our data Center.
• Coordinate a team, which consists of four network engineers.
• Cisco Unified Communications Manager (formerly Unified Call Manager), quality of service (QoS), gateways, gatekeepers, IP phones, voice applications, and utilities on Cisco routers and Cisco Catalyst switches
• In-depth knowledge of LAN/WAN design and implementation
• Tremendous experience with Cisco 700, 800, 1700, 2500, 3600, 7000 (7513) series routers, Pix and ASA Firewalls and VPN Concentrators. Strong experience with 1900, 2900, 3500, 5500 etc series switches, TCP/IP, VPN and Network Security.
• Tremendous experience with Checkpoint(R65 & R75), Nortel, Juniper EX & QFX Series , ACX, BX, J Series, M Series routers , IDS, IPS, NETSCREEN, JUNOS and also have great knowledge on Juniper Switches

Bluepal Solutions March 2009 – April 2010
Network Administrator

• Responsible for all network related changes.
• Configuration and Management of VPN's between Bluepal offices across the world. Network admin for infrastructure consists of Cisco routers, switches and ASA.

EMRI March 2008 – Feb 2009
Systems Administrator

• Remote Monitoring and Management of eight offices in INDIA.
• Worked Windows 2000/2003 Operating System, Active Directory, and Messaging - Exchange 2000/2003/2007 Server, Networking
• Extensive experience in managing critical online production servers of Active Directory, Exchange Server, DNS, DHCP, WINS, SharePoint server, MS Project Server, WSUS, SMS, SQL Server 2000/2005, Laptop’s and PC’s installation and Hardware configuration
• Deployment and managing Windows 2003, 2005 ,2008clustering and Storage Area Network (SAN), Firewalls, DSL, VPN, RDP, Group Policies.
• Implementing Virtualisation solution using – VMWare ESX Server 3.X and Windows 2008 R2 Hyper-V.
• Support to Desktops and Servers – Dell Power Edge, IBM, HP Blade Servers.
• Have good experience in trouble shooting desktop issues.
• Troubleshoot Server related issues and Monitoring the Network .
• Maintaining the Anti-virus Such as Mcfee , Kaspersky and Symantec.

Certified Information Security Manager