Nafisur Shaikh

About Nafisur Shaikh

IT Security professional with 10 years of experience, I have been responsible for designing and planning solutions, as well as implementing and managing Security Products for Servers, Endpoints, and Data. Throughout my career, I have been involved in projects related to operations, Migration, Upgrades, and the Implementation of new security solutions. Proficient in implementing and auditing security frameworks, My diverse skill set allows me to deliver robust security solutions that enhance organizational resilience.

Experience

1. Senior Consultant

   EY

   Sep 2022 — Present · Mumbai, IN

   Lead Threat Hunting operations across global clients in a multi-tenant MSSP environment, driving proactive detection and risk reduction.• Conduct hypothesis-driven hunts, IOC/TTP-based investigations, and emerging threat-based hunts aligned with MITRE ATT & CK and client-specific threat landscapes.• Perform advanced threat investigations by analyzing endpoint, network, authentication, and cloud telemetry to identify anomalies, malicious activity, or early-stage intrusions.• Identify threats and network weaknesses, helping clients prevent financial, operational, and reputational impact by closing critical security gaps.• Support Incident Response teams with deep-dive attack chain reconstruction, artefact analysis, timeline development, and containment recommendations.• Apply strong knowledge of cybersecurity frameworks such as MITRE ATT & CK, Cyber Kill Chain, and the Diamond Model during threat investigations and hunting activities.• Leverage expertise in SIEM platforms including Splunk, IBM QRadar, Stellar Cyber, Azure Sentinel, and SentinelOne for log analysis, query creation, and detection tuning.• Utilize OSINT and APT attribution techniques to track threat actor behavior, campaigns, and evolving TTPs relevant to MSSP clients.• Contribute to the tuning and development of security information and event monitoring systems (SIEM) use cases and other security control configurations to enhance threat detection capabilities• Prepare comprehensive threat-hunting reports including observations, risks, misconfigurations, and actionable remediation recommendations.• Having a great exposure on understanding the modern threat landscape and helping clients on creating a proactive cyber defense.• Engage with clients to gather requirements, clarify project scope, present hunting insights, and align on security priorities.• Mentor and delegate tasks to junior analysts based on skill, experience, and project needs, ensuring consistent high-quality deliverables.

Education

• Bharati Vidyapeeth

  Master of Business Administration - MBA, Information Technology Project Management

• Jetking

  Diploma, Computer Hardware Technology/Technician

• University of Mumbai

  Bachelor of Commerce - BCom, Accounting

Skills

• Windows Server
• Microsoft Sql Server
• Endpoint Security
• Networking
• Trend Micro Anti-Virus
• Disk Encryption
• Mcafee Antivirus
• Antivirus
• Management
• Technical Support
• Symantec Endpoint Protection