About
Senior Security Engineer with 5+ years of experience in cloud, network, and application security across AWS, OCI, and on-premise environments. Proven track record in mitigating credential stuffing attacks by 80% and leading zero-day remediation through strategic security policies and virtual patching. Skilled in OCI WAF, F5 ASM, Palo Alto WAF, Cisco ISE, and AWS security services, with expertise in ensuring compliance with ISO 27001, NIST, PCI DSS, GDPR, and PHI frameworks.
Skills & Expertise (57)
Work Experience
Senior Security Engineer
Oracle
Jun 2024 - Present
Lead Sec-Ops for cloud and application security across OCI, AWS, and on-premise environments, managing end-to-end incident response, vulnerability management, and access control, including leading critical zero-day remediation projects. Mitigated credential stuffing and bot-driven attacks by implementing rate-limiting, behavioral detection, and bot defense on F5 WAF and Palo Alto firewall, including whitelisting/blacklisting of URLs, domains, and IPs while configuring threat detection rules, reducing malicious traffic by 80%. Resolved complex Cisco ISE authentication and authorization incidents, ensuring seamless, secure network access for enterprise users. Managed 400+ critical vulnerabilities monthly and fine-tuned security policies to counter emerging attack vectors. Led organization-wide security awareness initiatives, delivering targeted training sessions that significantly increased policy adherence and reduced human-factor security risks. Optimized Symantec endpoint protection policies as EDR solutions, reducing malware incidents by 30% through enhanced detection logic and automation. Delivered risk assessments and security recommendations to senior leadership, informing high-level security investments and risk-mitigation roadmaps. Ensured GRC alignment by implementing ISO 27001, NIST, PCI DSS, and GDPR frameworks, supporting audit readiness and data protection for PHI/PII.
Priority Security Engineer
Citrix
Feb 2023 - Jun 2024
Managed NetScaler ADC, WAF, and VPN Gateway for global enterprise applications across APAC, EMEA, and NA regions, ensuring high availability and robust security for mission-critical services. Resolved high-priority escalations for global enterprise clients, optimizing load balancing and SSL/TLS configurations to ensure seamless service delivery. Implemented Rewrite/Responder policies, secure certificate management, and SAML/LDAP authentication. Assisted enterprise clients with VPN connectivity and security issues, enhancing remote access reliability and maintaining robust security posture across distributed networks. Proactively identified and mitigated security risks for global infrastructure, contributing to a 25% reduction in overall vulnerability exposure for high-priority clients.
Escalation Engineer / Technical Consultant
Capgemini (Cisco TAC)
Mar 2021 - Feb 2023
Served as L2 Escalation Engineer; provided expert troubleshooting for Cisco UCS, Nexus switches, and virtualization platforms. Deployed Hyperflex HCI, VMware ESXi, and RedHat RHEL in high-availability setups. Performed RCA and resolved high-impact network escalations while consistently meeting strict SLAs. Configured Nexus switches, B-series and C-series UCS hardware, and conducted log analysis. Reduced incident resolution time by 30% through internal documentation and automation scripts.
Education
Bachelor of Engineering (ECE) - Model Institute of Engineering and Technology
- 2020 · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Availability Details
Visa Status
Citizen
Relocation
Open to Relocation
Skills (57)
Click a skill to find developers with the same skill