Waseem Ali

Lead a high-performing SOC team comprising CTI specialists, SOC analysts, and a dedicated DFIR team, ensuring robust threat detection, swift incident response, and in-depth forensic investigations. Directed the acquisition, deployment, and operationalization of a cutting-edge Cyber Threat Intelligence (CTI) platform, optimizing technological effectiveness and intelligence integration. Successfully implemented Anti-malware Kaspersky technology across 13,000 endpoints and servers, significantly enhancing overall security posture and threat prevention. - Developed and executed comprehensive proposals and user requirements (RFC) for IT Asset Management and Patch Management systems, streamlining system maintenance and resource optimization. - Established and managed a proactive CTI unit responsible for continuous monitoring of cyber threat alerts, analyzing Common Vulnerability Exploits (CVEs) data, and overseeing timely Patch Updates to mitigate vulnerabilities. - Coordinated with cross-functional teams to integrate advanced security measures and improve incident handling procedures, fostering a resilient and adaptive cybersecurity environment.

- Spearheaded the planning, design, and implementation of data center solutions for NADRA’s core business applications, ensuring robust and scalable infrastructure. - Led server hardening initiatives for both Windows and Linux platforms, addressing emerging security threats and implementing CIS Level-1 benchmarks. - Configured and implemented HAProxy for effective load balancing of application servers and Nginx as a web server to optimize web traffic management. - Directed the deployment and integration of IBM vSAN with VMware, Hyper-V, IBM DS3512, and IBM V3700, enhancing storage and virtualization capabilities. - Managed NADRA's in-house private cloud infrastructure, overseeing 400+ servers on the VMware platform and driving enterprise and mid-range storage consolidation using IBM SVC. - Oversaw backup solutions deployment for NADRA, including NetBackup, ensuring reliable data protection and recovery. - Led team management and resource development efforts, contributing to the growth and efficiency of the infrastructure team. - Designed and executed tenders and RFPs, ensuring alignment with organizational needs and industry standards.

- Led the upgrade of NADRA’s domain infrastructure to the latest version, ensuring enhanced performance and security. - Implemented Microsoft Red architecture for NADRA, streamlining IT operations and integration. - Centralized Active Directory across all NADRA offices, improving user management and authentication processes. - Deployed Kaspersky Email Security Gateway, fortifying email communication against threats. - Managed Group Policy for NADRA, ensuring effective policy application and compliance. - Implemented a web proxy solution to optimize and secure internet traffic. - Directed the deployment and management of Kaspersky Antivirus across 13,000+ clients, enhancing endpoint security. - Oversaw the migration of 5,000 clients from Microsoft Exchange Server 2003 to 2010, and subsequently to Exchange Server 2013, improving email system capabilities. - Acted as lead coordinator for the system team in conducting ISO 27001 audits and ensuring compliance. - Executed in-place email upgrade from Exchange 2003 to Exchange Server 2010 for NADRA. Managed core activities related to ISO 27001, including the development of security policies, risk management, and compliance (GRC) for IT infrastructure and services. - Secured email and internet traffic from threats such as viruses, spam, phishing attacks, and worms using Secure Mail Gateway, Secure Web Gateway, and Secure Internet Gateway appliances.

-Expertly manage and configure network switches to ensure seamless data flow and connectivity. - Implement and fine-tune Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) rules on Juniper devices to bolster network security. - Provide high-level technical support to NADRA clients and the banking sector, resolving network and system-related challenges. - Conduct fundamental troubleshooting to identify and address network issues efficiently.