Maham Khurshid

About Maham Khurshid

Exceptional hands-on experience as a Cyber Security Analyst with over 5 years of…

Experience

1. IT Security Risk and Compliance Analyst Ii

   Excella

   Sep 2020 — Present

   Performed comprehensive Security Assessments as part of Assessment and Authorization process to determine if controls are being implemented correctly, operating as intended and meeting the desired objectives. Responsible for security assessment of online applications to identify the vulnerabilities in different. Categories like Input and data Validation, Authentication, Authorization, Auditing & logging. Conducted IT Risk Assessment and documented key controls. Used Network scanning using tools like Nmap Snort and Nessus as part of the penetration testing and forensic investigation, performed vulnerability testing using tools such as Nessus and OpenVAS. Coordinated with the dev team to ensure closure of reported vulnerabilities by explaining the ease of exploitation and the impact of the issue. Was involved in security testing of APIs using SOAP UI, OWASP Mobile Top Ten vulnerabilities. Resolves security-related operational issues reported through internal ticketing systems, including fault isolation and resolution for security devices and escalating response when necessary. Training the development team on the most common vulnerabilities and common code review issues and explaining the remediation. Good knowledge on Tenable network security. Develop, improve and help implement best practices for risk reduction across a broad range of enterprise applications, systems, networks and interfaces. Recommend security enhancements and purchases. Manual (DAST) security testing on the web applications against OWASP top 10 standards.

Education

• Strayer University

  Bachelor of Science