Amir S.

Cybersecurity Engineer

Fortitude Insurance Services LLC • Período integral

Jan 2022 - Aug 2023 • 1 yr 7 mos

Incorporated robust data protection measures and ensure GDPR compliance through implementation of privacy policies and procedures in alignment with industry best practices. Implementing ISO 27001 standards to establish, maintain, and continuously improve Information Security Management Systems (ISMS). Designed and implemented a cyber threat intelligence platform to enhance threat detection and response capabilities. Successfully integrated threat intelligence feeds and tools to provide real-time insights into emerging threats, enabling informed decision-making and mitigating cybersecurity risks effectively. Migrated legacy company backbone services to cloud infrastructures, resulting in a cost reduction, while also achieving more than 60% improvements in performance. Virtualized network components to enhance efficiency and flexibility by abstracting hardware resources and enabling dynamic allocation of computing resources. This approach streamlined resource management, optimized utilization of network infrastructure, and facilitated rapid scalability to meet changing demands. Established and implemented a robust zero-trust model to enhance security posture, leveraging continuous authentication and authorization resulting in a 33% reduction in security-related downtime and a 20% decrease in compliance audit costs. Implemented cybersecurity measures aligned with the NIST Cybersecurity Framework, conducted risk assessments, and collaborated with teams to develop security policies, demonstrating proficiency in applying NIST guidelines and standards to enhance organizational security. Deployed open-source IDS and firewall solutions (PfSense) with snort, zeek and suricate implementation to log and document network activity.

Cyber Security Analyst

Dunn • Meio período

Jan 2021 - Dec 2022 • 1 yr 11 mos

Formulated a comprehensive incident response and postmortem blueprint, detailing structured protocols and strategies for effectively addressing and mitigating security incidents. Orchestrating a detailed plan encompassing identification, containment, eradication and recovery ensuring a robust and response to potential threats reducing response time to a threat by 40%. Conducted penetration testing techniques utilizing industry-standard tools such as Nessus, Burp Suite, Nmap, Wireshark, and Metasploit to uncover and address OWASP Top 10 vulnerabilities. Executed post-incident analysis, scrutinizing network, firewall logs, and network capture files to identify and respond to anomalies effectively. Organized and conducted cyber security training seminars on social engineering techniques and methodologies for employees to improve cybersecurity awareness and reduce the change of social engineering attacks.