Meghdad Shamsaei

Plan, Design and Analyze enterprise security systems including Security monitoring and infrastructure Initiate upgrades to security systems as necessitated by technology availability and maturity, security gaps, emerging threats, business risk, and needs. Serve as Information Security Project in bank and bank`s corporate division. Plan and Design information security big picture to cover core business systems benefit and business needs. Infrastructure Security and Network Security Architect.

Core Banking Software Security Architecture Web Srvices Security Application Security . . .

Checklist ISO 27002 in general principle as: Policy Procedure Plan and Documentation Records Audit and Review Internal and External procedure security Risk management and assessment Services and information security design

Managing initial turnup of the core services. Execute soc processes, identify and measure critical soc metrics and continually improve the efficiency and effectiveness of all core services. Manage and develop SOC team members, including mentoring and capability Provide a framework for team members to be successful in achieving the team and individual performance objectives. Provide security expertise to the SOC team leveraging industry leading practices. Security Incidents Analysis

Software Security Web Application Security Network Security Architecture Penetration Testing Security Audit Cryptography

Web Application and Desktop Application Security Network Security Operating System Security and Hardening Control Room and the associated electronic security and safety systems such as CCTV, Fire Detection Data Center Security Solution (Physical Security) Core banking software security testing and Binary Reverse Engineering Code Review ( ATM drivers and softwares developed with KALIGNITE) ATM Dongle Design (Software, Driver and Cryptography algorithm implementation) - in POSTBank`s ATMs

Manage Software security team Implement Web App security (OWASP) standard by web developer team Network security architecture Penetration testing Network traffic analysis Embedded system security ( For Setup Boxes)

Linux Security Administration Penetration Testing (Pen Test Group coordinator – 4 Persons) Network Security (Firewalling with Cisco, Huawei and Linux Iptable, Network Segmentation ,IDS/IDP, NSM(Net Security Monitor) . . . ) Web Application Security Testing Tripwire and Security-Enhanced Linux (SELinux) Linux Services Security Services

Penetration Testing Network Security Web Application Security Testing with Automated Scanner Linux Administartion and Security Linux Services