10/25/2026 updated
EA
partially available
info: Available evenings and weekends
IT & Cybersecurity Engineer | SIEM, Threat Intel, IT Infrastructure & AppSec | 3+ years
lahore, Pakistan
Only remote
BS Software Engineering, University of Central Punjab | ISC2 Certified in Cybersecurity (CC)About me
IT & Security Engineer at YieldWerx Semiconductor, owning IT infrastructure and security end to end: built their SIEM from scratch, integrated threat intel, deployed the firewall, run Bitdefender endpoint security and lead web, desktop & source code security testing. 3+ years with UK/Canada clients.
ISO 27001Active DirectoryPenetration TestingComputer SecurityLinuxIncident ResponsePython (Programming Language)Network SecurityWindows ServersOWASPSecurity Information and Event ManagementSonarQubeSystems IntegrationVulnerability ManagementSnort
SIEM Engineering & Security Monitoring: Wazuh, Splunk, Microsoft Sentinel. End-to-end SIEM architecture, deployment, log onboarding, detection engineering, alert tuning, active response and incident response.
Threat Intelligence: VirusTotal, AbuseIPDB, MISP, Criminal IP, MITRE ATT&CK. TI feed integration, IOC analysis, threat hunting and automated containment.
Endpoint Security: Bitdefender GravityZone, EDR/XDR deployment, policy hardening, detection and response across company endpoints.
Network Security: pfSense, Suricata, Snort, IDS/IPS, firewall deployment and management, network segmentation, Wireshark traffic analysis.
IT Infrastructure Management: Windows Server, Active Directory, Linux, user and access management, endpoint provisioning, system hardening.
Application Security: web application penetration testing (OWASP Top 10, Burp Suite), source code security review (SAST), desktop application security testing, DAST, SCA, Snyk, SonarQube, Secure SDLC.
Vulnerability Management: Nessus, OpenVAS, Nmap, Nikto, ffuf, Gobuster, vulnerability assessment and remediation tracking.
Cloud Edge Security: Cloudflare WAF, Zero Trust, Bot Management, Rate Limiting, DDoS protection, DNS and SSL/TLS.
Compliance: ISO 27001, PCI DSS, risk assessment, security reporting and documentation.
Scripting: Python.
Certifications: ISC2 Certified in Cybersecurity (CC), TryHackMe SOC Level 1 and Pentest+, LetsDefend Splunk Engineer, Fortinet Cybersecurity. BS Software Engineering.
Industries: semiconductor, managed security services (MSSP), therapeutics/healthcare.
Experience
Professional experience0 - 5 years
Freelancer since2023
Languages
EnglishFluent
Project history
Lead IT infrastructure and cybersecurity for the company, owning security operations, IT systems and security tooling end to end.
- Designed, built and deployed the complete SIEM infrastructure from the ground up; run it fully: log onboarding, detection engineering, alert tuning, monitoring and incident response.
- Built the threat intelligence capability: integrated TI feeds into the SIEM for alert enrichment, IOC investigation and automated blocking of malicious sources.
- Designed and deployed the perimeter firewall: security policies, network segmentation, IDS/IPS and traffic monitoring.
- Manage organisation-wide endpoint security with Bitdefender: deployment, policy hardening, threat detection and response.
- Manage and maintain IT infrastructure: servers, network, user and access management, endpoint provisioning and security hardening.
- Application security engineer: web application penetration testing (OWASP Top 10), source code security reviews (SAST) and desktop application security testing, working with developers on remediation.
- Report security posture, risks and remediation progress to management.
Security engineering for a UK-based therapeutics company.
- Monitored and investigated security events in Wazuh SIEM, analysing logs to identify threats and support incident response.
- Led endpoint security: deployed EDR/XDR solutions and engineered Wazuh integrations with threat intelligence platforms such as Criminal IP.
- Worked with development and infrastructure teams to securely deploy web applications, validating IDS/IPS, WAF, firewall and network security controls before production releases.
- Managed Cloudflare security services: DNS, Zero Trust access policies and security configuration for the production environment.
- Configured Cloudflare WAF with custom firewall rules, Bot Management, Rate Limiting and DDoS protection to defend web applications against common attacks.
SOC, application security and network security for a Canada-based managed cybersecurity provider (MSSP).
- Monitored and triaged SIEM alerts in Wazuh and Microsoft Sentinel, analysed logs, investigated incidents and escalated critical threats.
- Performed application security testing with SAST, SCA and DAST (Snyk, SonarQube), supporting remediation and secure software development.
- Configured and managed Cloudflare WAF, firewalls, IDS/IPS, DDoS protection, SSL/TLS certificates and DNS records (MX, TXT, SPF).
- Used MISP, Criminal IP and VirusTotal to enrich threat intelligence, investigate IOCs, analyse attack patterns and support incident response.
- Worked with development and infrastructure teams to resolve security, deployment, networking and routing issues for secure production releases.
- Supported ISO 27001 compliance: evidence collection, audit support, compliance reporting and remediation tracking.