Resume

Sign in

Certified Cybersecurity Analyst

Location:
Sacramento, California, United States
Posted:
February 07, 2018

Contact this candidate

Resume:

FAHIM ASEY

**** ******* ***. **********, **, ****1 916. 280.7951 (C) ac4dzn@r.postjobfree.com

SUMMARY

A Cybersecurity Analyst who was recently selected as a Review Board member for the EC-Council Certified Security Analyst program (ECSA v9) with over 12 years of progressive experience focusing on secure network design, application and database security, threat modeling, vulnerability assessment, and user awareness and training.

EDUCATION

EC-Council University, New Mexico, USA - 2014 to Present

oMS Cyber Security

Kabul University, Kabul, Afghanistan – 2008

oBSc Computer Science

TRAINING AND DEVELOPMENT

Cisco: Officially certified in CCNP (R&S), CCNA (R&S), CCNA Security, Cisco ASA Specialist, CCND and CCNA Wireless.

EC-Council: Officially certified in Certified Ethical Hacker (CEHv9), Certified Security Analyst (ECSAv9), Certified Network Security Administrator (ENSAv4), Computer Hacking Forensic Investigator (CHFIv8), Securing Wireless Networks, Managing Secure Network Systems (CND) & Certified Secure Programmer (ECSP).

(EC-Council) In Project Management: Project Management in IT Security (PMITSv1), Beyond Business Continuity, Managing Organizational Change and Foundations of Organizational Behavior for the IT Practitioner.

Cistnet Global, Afghanistan: MCITP, Microsoft Exchange 2012 – a 78-day training session.

Firebrand, Dubai: Received training for Certified Systems Security Professional (CISSP) certification, from (ISC)2, May 2017.

Koenig Solutions, India: Exploit Writing Essentials in Python, May 2017.

TECHNICAL COMPETENCIES

Threat Modeling, Vulnerability Assessment & Penetration Testing

IT Security Project Management & Team Building

Web Applications, Database & Secure Application Development

Network Security, IDS, IPS & Firewall Security

Network Infrastructures & Datacom Design and Implementation

Procedure & Guidelines

End User Protection, Awareness, & Training

PROFESSIONAL EXPERIENCE

GridSME, California, USA Oct 2017 - Present

Cyber Security Analyst

Cyber Security services and consulting work to assist the Cyber Security team with ongoing annual service contracts, assessments, and improvements efficiencies of overall processes.

Provide expertise in the architecture of Cyber Secure environments from day to day configurations to complex control center requirements and best practices.

Overall teamwork and projects engagement on NERC and CIP compliances assurance on grid SCADA network including transmission, balancing and generator, control center operations, and technologies.

Working as subject matter expert on business development in technical areas of Cyber Security including creating proposals and statements of work, placing resources and managing client relationships.

Assist the GridSME other team members including Director of Grid Security on the strategic direction of GridSecurity domain.

NETLINKS Ltd., Kabul, Afghanistan (www.netlinks.af) May 2016 to May 2017

Information Assurance Specialist

Managed the planning, coordination, and implementation of the security requirements for the complex and multi-modular applications developed on Odoo (A Python ERP framework) and PostgreSQL to ensured secure development of application.

Engaged with application and database development teams to securely develop application and database within an Agile development methodology.

Prepared information assurance controls & checklists for data security and established audit trails to ensure access control monitoring.

Utilized vulnerability assessment tools including Nessus, Nexpose, OpenVAS, Acuentix vulnerability scanner, and Kali Linux.

Project Achievements

Shifted the development paradigm from “does it work” to “does it work securely,” after an extensive threat modeling, security assessment and presentations to the client, noting significant flaws in the initial design.

Restructured a comprehensive risk management plan and procedures for the project management office.

Afghan Wireless Comm. Company (AWCC), Kabul, Afghanistan Aug. 2013 to May. 2016

Manager - Network Infrastructures & Security

Managed Network & Cybersecurity engineering team overseeing 7 regional and 2 international offices. Provided secure, reliable Network & Internet access, with routing, switching, side-to-side VPN connections & GRE tunnels.

Designed and maintained the configurations of Palo Alto & Cisco ASA firewalls, Cisco IPS, and Sophos Cyberoam UTM .

Authored and published control network access policies in conjunction with IT requirements; developed a full Security Wheel model with real-time active monitoring with Nessus SecurityCenter Continuous View and Orion SolarWinds Monitoring & SolarWinds NCM.

Prioritized & analyze possible security threats, incidents and key metrics including proactive and reactive incidence response testing

Key Achievements:

Established and trained the first-ever cybersecurity team within the company; maintain a record of zero major intrusion incidents throughout tenure.

Led the complete network and security infrastructures installation of the Bayat Media Center with more than 700 wired/wireless users, meeting all budget, schedule, and technical objectives.

Afghan Wireless Communication Company (AWCC), Kabul, Afghanistan May 2009 to Aug. 2013

Operations LAN Manager

Lead the design/re-design, development and implementation of all network infrastructure projects.

Participated in the installation & configuration of Cisco edge routers, 3 layer switches, ASA firewalls with FirePOWER services.

Documented network & end user security incidents and provided the needed network visibilities for incident response team.

Managed the network hierarchy ensuring IVR interconnectivity with VTP domain and backbone protocols, mainly focusing on OSPF configuration and management.

Key Achievements:

Initiated and lead the LAN team within the IT department to manage the network infrastructure due to company growth.

Spearheaded construction of the first-ever, qualified Cisco-based network platforms with wired, wireless, fiber-based communications and Cisco security appliances, meeting budget and schedule with a network still in operation today.

Afghan Wireless Communication Company (AWCC), Kabul, Afghanistan May 2006 to May 2009

IT Support Engineer

Support IT corporate end users which were seeking for technical assistance over the phone and email.

Configuration and testing of any new software, hardware including workstations, printers and copiers.

Applied patches in accordance with company procedures along with software/OS/firmware upgrade.

Key Achievements:

Lead the design of an automated helpdesk ticketing application that communicated issue status to users improving internal efficiencies and user satisfaction.



Contact this candidate