Details
Skills
Security Operations: Security Monitoring, Security Event Analysis, Incident Response, Incident Triage, Threat Detection, Root Cause
Analysis, IOC Analysis, Post-Incident Review
• Vulnerability & Risk Management: Vulnerability Assessment, Vulnerability Management, Risk Assessment, Risk Mitigation, Security
Controls, Remediation Tracking, Security Assessments
• Security Frameworks & Standards: NIST Cybersecurity Framework, OWASP Top 10, MITRE ATT&CK, CIS, ISO, Secure SDLC
• Network Security: TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, Firewalls, IDS/IPS, Traffic Analysis, Packet Analysis, Network Hardening
• Identity & Access Management: IAM, RBAC, Authentication, Authorization, Least Privilege, Azure AD / Microsoft Entra ID, Session &
Token Security
• Application Security: Threat Modeling, Secure Coding, API Security, Authentication, Authorization, Input Validation, Secure Session
Management, Application Vulnerability Analysis
• Cryptography & PKI: Encryption, Hashing, AES, RSA, Public/Private Key Cryptography, Digital Signatures, SSL/TLS, PKI Concepts,
Certificates
• Cloud Security: Microsoft Azure, AWS Fundamentals, Cloud Security Controls, Secure Cloud Deployment, Cloud IAM
• Security Tools: Wireshark, Nmap, TCPdump, Snort, Suricata, Burp Suite, OWASP ZAP, Metasploit, Volatility, Kali Linux, VMware
• Programming & Automation: Python, Bash, Java, SQL
• Operating Systems: Windows, Linux, macOS
About
IT Security Engineer and cybersecurity professional with 6+ years of combined IT and software engineering experience and a
Master’s in Cybersecurity from New York Institute of Technology (NYIT), Vancouver. Hands-on experience across security
monitoring, vulnerability assessment, incident response, network security, IDS/IPS, digital forensics, IAM, secure application
development, cloud security, threat modeling, and risk assessment through cybersecurity labs, academic projects, and professional
engineering environments.
Proficient in applying NIST Cybersecurity Framework, OWASP Top 10, MITRE ATT&CK, secure SDLC, risk management, and
security control principles. Hands-on experience with Wireshark, Nmap, Snort, Suricata, TCPdump, Burp Suite, OWASP ZAP,
Metasploit, Volatility, Kali Linux, Azure, Python, and Bash. Strong background in secure architecture, API security, authentication and
authorization, encryption, logging, and technical troubleshooting.
Experienced in collaborating with technical teams, analyzing security risks, documenting findings, implementing security improvements, and
translating technical issues into actionable remediation recommendations.
Profile Photo
