Mohammed Sirajuddin

Experience

• 

  Nucleus Software

  Dec 2005 - Feb 2017

  Sr Security Analyst

   Understanding the interplay between information security and business and understand the role that information security plays in the overall business ecosystem Partnered with Line of Business Program teams to recognize the key risk and remediation efforts for improved security posture. Helped the IT Risk Management group to close the audit findings Understand both technical and non-technical aspects of information security Implemented and maintained 2 ISMS (end to end) complying to ISO 27001 Experiencing in facing external audits for ISO 27001:2005 Configuring and maintaining network security devices, Like, Firewall, IDS and IPS, security profiles (Antivirus, dos attacks, url and content filtering, malware analysis) Creation of Information security policies and procedures Information security training and awareness Upgradation to ISO 27001:2013 to ISO 27001:2015 Risk management – Assessment & Treatment Data center- Physical and Environmental security Business continuity and Disaster Recovery planning Governance framework for ISMS implementation, monitoring and sustenance VA/ PT for web application (Banking applications, Finnone, FinnAxia) Performed penetration testing of infrastructure (Network, servers, application, database) Supporting SOC team on reported security incidents and analysis Secure code review of using HP Fortify and Checkmarx. Use OWASP Risk Rating methodology to assign severity Developed and implemented online ISMS e-learning portal. Show less

• 

  Oracle

  -

  IT principle security analyst
• 

  Tech Mahindra

  Mar 2023 - now

  Principle security architect

   Experienced Information Security professional with more than 18+ years in IT Security and compliance of functional and managerial experience in the field of Information Security Strategy, pre-sales Application security testing (SAST,DAST & MAST), Network Security, Risk Assessment, VA/PT, secure code review, Change Management, Governance, Audits and Compliance SDLC Models & Architecture with Agile, DevOps, SRE & DevSecOps, SOA & Micro services Experience of working on $Multi-Million proposals/bids for managed security services & Implementation projects Coordinate with OEMs for identifying best solution which is economically and technically a balanced approach to satisfy customer requirements Coordinating with the alliance partners for security products and getting the BOT-outs for different various product teams Possesses extensive knowledge of design and implementation of Information Security Management System across IT/Financial/Telecom industries Proven skills in managing Information security operations including Security monitoring (SIEM), Vulnerability Assessment, Antivirus/malware protection, Unified Threat Management, IDS/IPS, Application Security, Data Leakage Prevention. Demonstrated ability in leading teams, managing deliveries and directly working with international clients and global service providers BSI Certified ISO 27001:13 Lead Auditor, Exin ITSM Certified, Exin ITIL Expert, EC-Council Certified Ethical Hacker, Payment Card Industry Data Security Standards (PCI DSS), CISA, CRISC & CISM Certified. Show less