Bilal Goolam Mahomed

• Senior Vulnerability Management Analyst for work that needs to be performed within the Global Computer Incident Response Team. 
• Analysed security vulnerabilities and malware to assess risk. (SOC Analyst)
• Knowledge of information security frameworks, standards, and regulations (e.g., ISO 27001, NIST, GDPR, CCPA).
• Review output from Rapid7, O365 Security & Compliance, Microsoft Cloud App Security (MCAS)
• MS Defender XDR endpoint protection, patch management across EMEA, APAC and US and software distribution. Fix detected vulnerabilities to maintain a high-security standard (Patch Management / Remediation).
• Provides risk reports on existing vulnerabilities / malicious code and their potential impact to Hartree’s environment. 
• Verified vulnerability remediation and compliance through network and host-based vulnerability scanning. 
• Participated in the development of new services to be added to the Vulnerability Management portfolio. 
• Guide and assist with the remediation of vulnerability findings.
• Respond to alerts identified by the SOC.
• Work with Security leadership to present information and influence change
• Participate in risk management, decision-making, and collaborative discussions
• Develop templates and materials to help with self-service risk management actions
• Administer endpoint protection system (AV).
• Administer email security system (mail filter through MS365 Defender).
• Investigate security breaches and other cybersecurity incidents (SIEM).
• Install security measures and operate software to protect systems and information infrastructure, including database security and data encryption programs (Patch Management).
• Document security breaches and assess the damage they cause (Incident Response).
• Help colleagues install security software and understand information security management.
• Research security enhancements and make recommendations to management.
• Stay up to date on information technology trends and security standards.
• Participate in the design of information and operational support systems.
• Liaise with vendors and other IT personnel for problem resolution.
• Stay current on IT security trends and news.
• Technical knowledge of operating system security (Windows, Windows Server, Active Directory).
• Strong attention to details with an analytical mind-set and outstanding problem-solving skills.
• Ability to multi-task and communicate network security issues to peers and management.
• Design technology solutions related to different security domains such as Identity and access, end point detection and response. 
• Provide technology consultation and advise where required
• Implement technology solutions such as end point solutions among others
• Support the ongoing maintenance of the security technologies including end point detection systems etc. 
• Test and evaluate security products 
• Liaise with stakeholders in relation to cyber security issues and provide future recommendations 
• Generate reports for both technical and non-technical staff and stakeholders 
• Provide advice and guidance to staff on issues such as spam and unwanted or malicious emails
• Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues

Security

• Security+ (Training, exam TBC)                                           

Mar 2020     

• AZ-500 MS Azure Security                                                                                                                                                   Feb 2020
• Sailpoint Implementation and Administration                                                                                                  Apr 2020
• RSA IMG Admin & Support                                                                                                                                    Jul 2019
• Oracle IDM & IAM Admin & Support                                                                                                                                     May 2019
• Product Technical Training - Beyond Insight (Beyond Trust Vulnerability)                                                                        

Jul 2017

• Network Security Expert 1, 2 & 3                                           

Jul 2020

• Certificate of Proficiency Tenable.io                                  

Aug 2020

• Intro to Cloud Security with Microsoft Azure                        

Feb 2020

• Introduction to Cybersecurity (Cisco)                                

Aug 2020

• Cybersecurity Essentials (Cisco)                                         

 Sep 2020

• ICSI | Certified Network Security Specialist (CNSS)              

Sep 2020

• Confirmation of Completing Course Intro to CISSP Security Certification                                                               

Jul 2020

• Rapid7 Certified InsightIDR                                                 

Aug 2020

• Rapid7 Certified InsightVM                                                 

        Oct 2022

Information Technology

• Java, Networking, Technician                                              Jan 2006
• Linux Beginner                                                                     Nov 2019
• AZ-900 MS Azure Fundamentals                                           Feb 2020
• AWS Cloud Practitioner Essentials: Core Services                  Jul 2020
• AWS Business Professional                                                    Oct 2020
• AWS Technical Professional                                                  Oct 2020