Prince Afsar

• Implemented and managed enterprise security tools (Pentera ASV, Fidelis NDR, StealthBit FAM, Syteca UEBA) for government client, strengthening compliance with NIST CSF, ISO 27001 and Zero Trust standard, while conducting demos and proof-of-concept presentations to stakeholders.

• Demonstrates hands-on experience with Forcepoint DLP to enforce data loss prevention controls, protecting intellectual property and regulated data (e.g., PII under GDPR and cardholder data under PCI DSS). Ensures compliance with data protection standards while supporting business continuity and operational efficiency.

• Conducted enterprise-wide vulnerability management using Tenable Nessus, including scan execution, results analysis, and maintenance of vulnerability dashboards and mitigation trackers— enhancing visibility, ensuring continuous assessments, and accelerating remediation by 30%.

• Administers Manage Engine Endpoint Central to support IT governance through centralized asset management, vulnerability assessment, patch deployment, data protection, and configuration control.

• Ensures governance and access control compliance by administering the ARCON Privileged Access Management (PAM) solution, overseeing user entitlements, secure credential handling, and resolving privilege-related issues to support risk mitigation and regulatory requirements.

• Manages endpoint security and data protection by administering Ivanti Lumension control

• Deployed and managed Cisco ASA Firewall, Checkpoint R80 firewall, F5 LTM, F5 ASM and F5 GTM

• Lead end to end security projects, including building HLD and LLD documentation in MS Visio.

• Applying security patches, upgrades and applying configuration changes as requested by customer

• Troubleshooting VPN and network connectivity issues in real-time.

• Working closely with the UK-based security team and project manager, using the Kanban workflow to manage the delivery of the project to the customers within the agreed SLA

• Understanding the customer requirements and closely working with the design team for proper and timely implementation of the managed devices.

• Build, configure, and deploy virtual machines, ensuring they meet operational and security standards.

• Providing Training on IPv6 to the new joiners as a part of the company training program.

• Provide required support to other IT functions and End-User Support concerning network problems and adhere to SLAs and OLAs related to network and security services

• Proficiency in using advanced network analysis tools like Wireshark for troubleshooting

• Deployment as well as managed multiple Cisco ASA Firewall, Checkpoint R80 firewall, F5 LTM

• Working on the Splunk tool for monitoring the events and incidents

• Creating reports and different types of dashboards on Spunk as per the client's requirement

• Working on monitoring tools such as Nagios, Gryphon, and Blacksheep

• Handling and reporting security incidents as per Client Security policies

• Applying security patches, upgrades & changes as requested