Bilal Rashid

F5 Web Application Firewall (WAF):

• Responsible for protecting all the publicly exposed applications from security threats and attacks by placing them behind a WAF.
• Implemented and fine-tuned WAF security policies to protect applications against OWASP Top Ten vulnerabilities.
• Continuously improve and customize WAF policies by collaborating with application developers.
• Responded proactively to security incidents by monitoring WAF logs, including allowing false positives being blocked.
• Updated ASM signature set updates and upgraded F5 ASM TMOS to the stable versions.

Tipping Point IPS

• Deployed and managed Tipping Point IPS devices to protect the network infrastructure from advanced threats and vulnerabilities.

• Developed and maintained custom IPS policies tailored to the organization's specific security needs.

• Regularly updated IPS signatures and rules to adapt to emerging threats and vulnerabilities.

• Collaborated with the network team to fine-tune IPS policies for optimal performance and minimal false positives.

• Conducted security assessments and penetration testing to validate the effectiveness of the IPS.

• Monitored and analyzed network traffic for anomalies and potential security breaches using Tipping Point’s reporting and alerting capabilities.

• Implemented failover and redundancy configurations to ensure continuous IPS protection.

• Assisted in incident response and forensic analysis during security incidents.

• Upgraded TOS for IPS and SMS to latest stable versions.

• Managing the enterprise setup comprising of Cisco ASA, Nexus 5ks, F5 BIG-IP LTM, Cisco 2960, N2k, and Cisco 3945.
• I was responsible for the network part of the migration of the legacy DC to the Azure Cloud.
• Worked together with suppliers to develop and implement network architecture.which included subscriptions, VNET subnet creation and proper segregation at firewall and NSG (network security groups)

• I was responsible for managing the Telenor enterprise network and security domain.
• Managed Cisco Enterprise switches like 4500, 6500, 3560, N5K, and N2K. Also, network firewalls like Cisco ASA, FTDs, and Cisco ISE.
• I worked on the migration from Cisco Legacy to Cisco ACI. It included configuring tenants, VRFs, EPGs, bridge domains, AEPS, domain configurations, and VPC configurations.

• Responsible for analyzing and evaluating installations, operations, and maintenance of Pakistan Internet Exchange (PIE) TCP/IP network (both LAN and WAN) of PTCL, including Cisco CRS, GSR 12410, Cisco 7613, 7513, 7206, 7609, 2600 series routers, and Cisco 6500 catalyst switches

Managed MPLS network of Pakistan Internet Exchange, capable of carrying voice, video, and data for PTCL's voice and data services, providing L2 and L3 VPNs.

• Responsible for the integration of OSS system (OVSA) with intellin-AAA, BMS server, and IPTV middleware.

• Maintenance and troubleshooting of OSS (HP OPEN VIEW servers) including OVSD, OVO, and OVPI, OVSA (open view service Activator) running on HP Unix