NABEEL AHMED

Experience

• 

  UN-Habitat (United Nations Human Settlements Programme)

  May 2007 - Dec 2013

  IT Administrator

  • Planned and executed the redesign and upgrade of the Active Directory infrastructure from Server 2008 to Server 2012R2, ensuring minimal downtime and maximum security.• Implemented Microsoft Exchange Server 2007 SP3, along with the deployment and management of the email security appliance to safeguard against spam, phishing, and other email-based threats.• Deployed and configured Microsoft SCCM for efficient patch management, software distribution, and baseline enforcement, ensuring a standardized and secure environment across the organization.• Implemented a network proxy solution utilizing open-source technology, providing optimized bandwidth usage and advanced URL filtering capabilities to prevent access to malicious websites and content.• Designed and managed a robust GIS LAB environment, consisting of approximately 100 workstations, including performing OS upgrades, patching, and deploying endpoint protection solutions to safeguard against potential cyber threats.• Established a secure network infrastructure based on IPSEC VPN, connecting remote branch offices across the country with robust security measures to protect sensitive data.• Created and maintained technical documentation, including LLDs, HLDs, user manuals, and SOPs, ensuring accurate and standardized procedures for all IT-related tasks. Show less

• 

  PLRA f.k.a PMU - Board of Revenue Punjab

  Jul 2015 - Dec 2023

  Cyber Security Analyst

  ● Managed information security and threat management for a government department responsible for critical land records data of over 55 million landowners, spanning 200+ branch offices and supporting more than 5000 employees. Improved the SOC monitoring capabilities, leading to a significant reduction in security incidents.● Demonstrated hands-on experience in monitoring, triaging, analysis of offenses, and gathering, hunting, and analysing threat intelligence. Led investigations into malware infections, identifying attack vectors and implementing remediation measures.● Operationalized threat intelligence for SIEM solutions, creating tailored use cases, and refining SIEM rules for effectiveness, leveraging frameworks like MaGMa. Enhanced threat visibility and detection capabilities, resulting in the timely mitigation of potential security breaches.● Implemented Rapid7 InsightVM for vulnerability management, overseeing vulnerability analytics, and prioritization based on scan results. Improved vulnerability detection rates by 30% through continuous tuning and optimization of scanning policies.● Implemented system hardening based on CIS benchmarks to reduce the potential attack surface. Demonstrated a strong understanding of risk assessment methodologies, utilizing the CIS Risk Assessment Method (CIS RAM) framework to assess and prioritize risks. Collaborated with audit teams to ensure ongoing compliance with CIS benchmarks, resulting in improved system security.● As part of the security team, actively collaborated with developers to integrate secure coding practices throughout the SDLC for the land records management web application. This included adoption of secure coding best practices like input validation, parameter sanitization, and secure password hashing, resulting in significant reduction in security vulnerabilities identified during code reviews Show less

• 

  Hamilton City Council

  Apr 2024 - now

  Senior Cyber Security Engineer