Senior Cyber Security Engineer (9+ yrs, GCP & Cloud)

Sr. Cyber Security Engineer

Sumaiya

Email: **************@*****.*** Ph: +1-716-***-**** linkedin.com/in/sumaiya-meman-691aa3119

Professional Summary

Results-driven Cyber Security Engineer with 9+ years of experience in network security, cloud security, incident response, threat intelligence, and compliance. Proven expertise in designing and implementing SIEM solutions (Splunk, QRadar, LogRhythm), firewall management (Palo Alto, Cisco ASA, Checkpoint, Juniper SRX), and vulnerability management (Qualys, BigFix, CrowdStrike Falcon). Adept at conducting penetration testing (SAST/DAST), phishing awareness campaigns (Gophish), and risk assessments. Skilled in IAM, MFA, SSO, Zero Trust Architecture, and cloud security (AWS, Azure, Prisma Cloud). Strong experience in mentoring teams, developing security policies, and integrating automated security processes using Python.

•Hands-on expertise in SIEM solutions including Splunk, QRadar, and LogRhythm for real-time threat detection and incident response.

•Skilled in firewall administration and management across Palo Alto, Cisco ASA, Checkpoint, and Juniper SRX platforms.

•Strong background in vulnerability management using Qualys, BigFix, and CrowdStrike Falcon.

•Proficient in penetration testing (SAST/DAST), phishing awareness campaigns with Gophish, and enterprise-wide risk assessments.

•Experienced in IAM, MFA, SSO, and Zero Trust Architecture for securing enterprise environments.

•Adept at securing multi-cloud infrastructures (AWS, Azure, Prisma Cloud) with focus on automation and compliance.

•Experienced in Google Cloud Platform (GCP) security and advanced troubleshooting, with proven ability to diagnose, resolve, and prevent complex cloud, network, and security incidents in enterprise environments

•Designed and implemented an integrated Zero Trust security framework combining CrowdStrike Falcon, Netskope, and Prisma Access for unified endpoint, network, and cloud protection.

•Experienced in Python-based security automation for monitoring, incident response, and vulnerability remediation.

•Performed incident response activities using the Symantec (Netskope and Skyhigh) DLP tools (across network, VPN, e - mail system, at rest storage, file shares, etc.

•Proven leadership in mentoring teams, defining security policies, and driving security governance initiatives.

•Ensured high customer satisfaction by maintaining SLA compliance, clear communication, and proactive issue management.

•Collaborative communicator skilled in working with cross-functional teams to strengthen enterprise security posture.

Technical Skills

Category

Tools & Technologies

SIEM Solutions

Splunk, IBM QRadar, LogRhythm

Vulnerability Management

Qualys, BigFix, CrowdStrike Falcon

Endpoint Security & DLP

CrowdStrike, Prisma Cloud, CASB, McAfee DLP

Firewalls & Network Security

Palo Alto, Cisco ASA, Checkpoint, Juniper SRX, Cisco ISE

Identity & Access Management

IAM, RBAC, MFA, SSO

Cloud Security

AWS, Azure,Gcp, Prisma Cloud, CloudTrail, CloudWatch

Security Automation

Python (automation & scripting), Java (log analysis, SIEM integration), GraphQL

Network Protocols

OSPF, BGP, MPLS, EIGRP, VLAN, VPN, IPSec

Compliance & Standards

NIST CSF, ISO 27001, PCI DSS, SOX, HIPAA, GDPR

Penetration Testing & Threat Analysis

SAST, DAST, OWASP Top 10, Threat Hunting, SOC Operations

Traffic Monitoring & Tools

Wireshark, NetFlow, SolarWinds

Phishing & Awareness

Gophish (Email Security Training)

Professional Experience

Client: DISH Network – El Paso, TX Nov 2023 – Present

Role: Senior Cyber Security Engineer

Responsibilities: -

•Developed and implemented enterprise-wide security policies and procedures to protect critical data and networks.

•Deployed firewalls, DLP, and antivirus solutions to safeguard organizational assets.

•Monitored network traffic for suspicious activity, performing threat analysis and incident investigation.

•Conducted vulnerability assessments and audits using Qualys and BigFix to identify and mitigate risks.

•Hands-on experience securing and managing workloads on Google Cloud Platform (GCP) services including Compute Engine, Cloud Storage, and IAM.

•Designed and implemented CI/CD pipelines for secure configuration deployment in hybrid cloud environments.

•Integrated Netskope with Azure AD and Okta SSO for user-based policy enforcement and identity-aware access control.

•Automated security tasks using Python scripts to enhance incident response and vulnerability management.

•Authored technical documentation, SOPs, and runbooks for customer environments to ensure consistent operational standards.

•Developed Java-based tools for log analysis and integration with SIEM platforms (Splunk, QRadar).

•Conducted penetration testing on POS and cloud networks to identify and mitigate vulnerabilities.

•Managed user access rights, roles, and permissions, enforcing MFA and SSO across enterprise systems.

•Created GraphQL APIs to integrate SIEM event data for advanced analytics and reporting.

•Implemented Next-Generation Firewall (NGFW) rules, content filtering, and network segmentation.

•Trained staff and mentored junior engineers on best security practices, incident response, and policy adherence.

•Set up real-time alerts and incident workflows for policy violations and data leakage events; automated remediation through Python and Netskope REST APIs.

•Ensured compliance with HIPAA, PCI DSS, SOX, and GDPR in cloud and on-premises environments.

•Collaborated with SOC teams to conduct threat hunting, risk assessments, and forensic investigations.

•Integrated SIEM with IDS/IPS, firewalls, and endpoint solutions for comprehensive threat visibility.

Environment: Qualys, BigFix, CrowdStrike Falcon, Splunk, QRadar, LogRhythm, HIPAA, PCI DSS, SOX, NIST CSF, ISO 27001, SOC 2, Palo Alto, Cisco Firewalls, IAM, RBAC

Client: Jewellers Mutual Group – Neenah, WI Sep 2021 – Oct 2023

Role: Cybersecurity Engineer

Responsibilities: -

•Designed, deployed, and managed QRadar SIEM solutions to monitor and respond to security incidents.

•Integrated CASB, EDR, DLP, Prisma Cloud, and CrowdStrike with SIEM for enhanced threat detection.

•Tuned alerts, configured offenses, and reduced false positives to optimize SOC operations.

•Conducted risk assessments on underwriting files and insurance datasets to identify vulnerabilities.

•Performed advanced troubleshooting of network, cloud, and security incidents to minimize downtime and business impact.

•Streamlined incident detection and response by correlating alerts from CrowdStrike, Netskope, and Prisma in Splunk SIEM, reducing mean time to respond (MTTR) by 40%.

•Implemented Enterprise Browser Security (TBD: Island or Prisma) to enforce granular access controls, isolate untrusted sessions, and protect corporate data during SaaS and web app use.

•Led incident investigation and response for Netskope-generated alerts, performing root cause analysis and implementing preventive controls.

•Performed SAST/DAST testing to ensure OWASP compliance on insurance applications.

•Executed phishing awareness campaigns using Gophish with custom templates and landing pages.

•Developed and maintained SOPs aligned with ISO 27001 and NIST frameworks for compliance.

•Integrated logs from CrowdStrike, Okta, and Office 365 into SIEM for centralized visibility.

•Conducted vulnerability scanning and remediation for web applications and internal systems.

•Provided guidance and mentorship to junior engineers on incident response and policy implementation.

•Led cybersecurity policy alignment initiatives to improve organizational risk posture.

Environment: IBM QRadar, CrowdStrike, Prisma Cloud, Okta, Office 365 Security, Gophish, ISO 27001, NIST, OWASP, EDR, CASB, DLP, SAST, DAST, Threat Hunting

Client: Cardinal Health – Dublin, OH May 2018 – Jul 2021

Role: Network Security Engineer

Responsibilities: -

•Configured and maintained Cisco ASR routers, Catalyst/Nexus switches, and firewalls for secure enterprise networking.

•Designed and implemented LAN/WAN solutions, ensuring secure, high-performance connectivity across locations.

•Authored detailed Standard Operating Procedures (SOPs) and runbooks for incident handling, policy updates, and Netskope administration.

•Managed routing protocols (RIP, OSPF, BGP, EIGRP) with route maps, redistribution, and authentication for stability.

•Implemented Zone-Based Firewalls, Palo Alto policies, and F5 LTM load balancing for network segmentation.

•Established CrowdStrike–Netskope integration using APIs to share threat intelligence, enabling automated response actions (e.g., endpoint quarantine upon DLP violation).

•Deployed Cisco ISE 2.0 and Aruba Wireless Controllers for secure network authentication and guest access.

•Conducted traffic analysis using Wireshark, NetFlow, SolarWinds, and automated monitoring with Infoblox DNS/IPAM.

•Participated in capacity planning, disaster recovery, and IT security planning for high availability.

Environment: Cisco ASA, Palo Alto, Juniper SRX, Cisco ISE 2.0, Bluecoat Proxy SG, F5 LTM, ASR Routers, Nexus/Catalyst Switches, HSRP, VRRP, GLBP, Wireshark, Infoblox, Windows Server

Client: Gainwell, Tysons, VA Feb 2016 – Apr 2018

Role: Network Administrator

Responsibilities: -

•Configured firewalls, routers, and switches to secure DMZ and enterprise network environments.

•Maintained Cisco Nexus, ASR, and 6500/7K/5K switches with advanced routing and VLAN segmentation.

•Implemented VPN solutions (IPSec, GRE, SSL) for secure site-to-site and remote access.

•Monitored and analyzed network traffic for security threats using Wireshark, SolarWinds, and NetFlow.

•Supported VoIP, Citrix, and L2VPN solutions, ensuring high availability and secure communications.

•Applied encryption, crypto maps, and ISAKMP configurations for secure VPN authentication.

•Created and maintained network documentation and security policies in compliance with IT standards.

Environment: Cisco Nexus/ASR, Cisco ASA, Checkpoint, Palo Alto, VPN (IPSec, GRE, SSL), MPLS, OSPF, BGP, STP/RSTP, HSRP/VRRP/GLBP, Wireshark, Windows Server, F5 BIG-IP LTM

Education Details:

Bachelor in Childhood Education: from Maharaja Sayajirao university of Vadodara, Gujrat, India :2010

Contact this candidate