Highlights:

Skills:Information Security, Application Security, Vulnerability Assessment, Threat Analysis

Information Security Engineer 10/2023 - current
Khani staffing corporation, , United States
As an information security engineer my job is to ensure all the requirements and solutions are compliant with security standards, incident reporting, cloud security best practices, threat analysis and detailed reporting through tools
- Evaluate, implement, and manage security tools and technologies aimed at safeguarding applications. This may include web application firewalls (WAFs), intrusion detection systems (IDS), security information and event management (SIEM) solutions, etc. - Utilizing sophisticated tools to perform comprehensive threat assessments and vulnerability scans. - Developing and overseeing incident response protocols, leading efforts to manage and resolve security breaches. - Implementing robust monitoring solutions and conducting detailed log analysis to identify and address potential security threats. - Conducting audits and assessments to ensure compliance with relevant industry standards and regulations. - Create, oversee, and update organization-wide information security policies, standards, guidelines, and procedures to ensure compliance with local, state, federal regulations, and industry standards such as PCI DSS and ISO 27001. - Identify, assess, and mitigate IT risks. Develop and manage frameworks, processes, and tools necessary for IT risk management. - Ensure compliance with regulatory requirements, including PCI DSS and ISO 27001 standards. - Prepare detailed reports outlining findings, risk assessments, and recommended remediation strategies. Communicate findings to technical and non-technical stakeholders. - Implemented Cloud Security best practices within organization this includes Dockers, Kubernetes containers best practices.--

Riphah International University 03-2021 - 07-2023
, , Pakistan
Degree: Master's Degree
Major:Data Science
In a Data Science degree I learned the skills to analyze, interpret and secure complex data, combining principles from statistics, computer science, and domain-specific knowledge. This interdisciplinary field is increasingly vital as organizations rely on data to inform decisions, predict trends, and enhance operations.

Login to view resume: Sheraz_Ahmed_Siddiqui -