Irshad Irfan

• IT policy, control design and business process risk identification/mitigation reviews. • Cloud security configuration review and cloud secure matrix reviews. • Data migration post implementation review covering application functionality controls review. • Database (SQL), operating systems / platforms (UNIX) and network configuration and security reviews. • Application access and automated control review. • Plan internal and external audit procedures and create audit reports.

• Planning, implementing, managing, monitoring and upgrading security measures for the protection of the organizations data, systems and networks. • Responding to all system and/or network security breaches. • Ensuring that the organization's data and infrastructure are protected by enabling the appropriate security controls. • Participating in the change management process. • Testing and identifying network and system vulnerabilities.

• Mobile Applications and Web Application Audit • Investigate arising incidents caused by malicious activities, and identified false positives • Documented security events daily to create a baseline of activity for the client network • Intrusion Prevention and Detection System • Investigated alerts created by IDS/IPS including malicious file uploads, compromised servers, SQL injections, and port scanning • Performed in-depth forensics on workstation hard drives

Fornsic Investigation and Netwrok Security