Aynaz Alamdari

Experience

• 

  Tandis

  Sept 2008 - Jan 2016

  Software Developer

  - Reviewed project documentation regularly and made all important changes to ensure that it matched updates to the project scope.- Developed desktop applications such as MIS, HIS and accounting using C#.Net.- Worked on existing solutions based on ASP.NET, C #.Net and VB 6 to make them even more stable and keep strong performance.- Conducted regular code reviews and used static analysis tools to identify and mitigate potential security vulnerabilities in the software codebase.- Ensured that user inputs were properly validated, sanitized, and escaped to prevent malicious code execution.- Implemented proper error handling practices to prevent exposing sensitive information in error messages and logs, reducing the risk of information leakage. Show less

• 

  Mobin Co

  Jan 2017 - Jan 2020

  Software Developer

  - Provided programming support for new and existing information systems based on user specifications with guidance from other staff members. Consulted with and provided users with assistance in determining program enhancements and required maintenance.- Performed program maintenance, modifications, and enhancements to new/existing systems through programming, testing, documenting, and training users.- Modeled data and designed SQL databases; participated in definition of project tasks; gathered and understand requests and requirements.- Implemented encryption algorithms to secure sensitive data at rest and in transit, safeguarding user information from unauthorized access.- Configured GPOs to restrict access to specific network resources based on user roles and departments.- Set up GPOs to enforce strong password policies organization-wide, including minimum length, complexity requirements, and password expiration intervals.- Implemented secure coding guidelines and practices to prevent common vulnerabilities such as Cross-Site Scripting (XSS) and SQL Injection.- Implemented role-based access control (RBAC) to manage user permissions and access levels within the software.- Designed input validation processes to prevent data input from becoming a potential attack vector, mitigating risks associated with various injection attacks. Show less

• 

  Self-employed

  Jan 2023 - now

  Research Experience

  Cybersecurity ProjectsAzure Synapse Analytics Security Research Project- Conducted extensive research on Azure Synapse Analytics security, including best practices for data protection and compliance. - Successfully established and configured a secure POC, including a Virtual Network (vNet), while implementing and testing private endpoints to ensure secure data transmission.- Designed the POC to facilitate connectivity with Azure Synapse Analytics exclusively through private endpoints, eliminating external internet exposure.- Gained hands-on experience in planning, implementing, and securing data workflows within Azure Synapse Analytics, contributing to a more comprehensive understanding of cloud security practices and compliance requirements.- Proficient in securely managing cryptographic keys and secrets by utilizing Microsoft Azure Key Vault, ensuring the highest level of data protection.- Successfully implemented and maintained key management practices for safeguarding sensitive information, such as encryption keys, connection strings, and passwords.- Configured and integrated applications and services to access keys and secrets stored in Azure Key Vault, enhancing data security and reducing the risk of exposure.- This research provided practical insights into securing data and applications within Azure Synapse Analytics, contributing to my knowledge in cloud security and data protection best practices. Show less