Mohammad Ishfaque Jahan Rafee
Cyber Security Analyst @CMiC
Signup · Get unlimited contacts
WORK HISTORY
Cyber Security Analyst @CMiC
Toronto, ON, CA
Use threat modelling to find out potential flaws in current infrastructure configuration- Explore room for improvement in Cloud Security (AWS and OCI) & potential threat vectors- Work with vendors to find gaps in current solutions- Investigate security incidents using SIEM (Azure Sentinel)- Review, propose and modify incident response plan as required- Review change requests that impact CMiC Infrastructure for security vulnerability- Work with cross-functional teams to develop roadmap for CMiC security landscape- Review policies for SOC2, ISO 27001 and CMMC compliance- Apply controls to conform to aforementioned policies and test compliance against the said controls- Manage new tooling procurement for security solutions by gathering requirements, managing PoC and vendor relations
EDUCATION
Bangladesh University of Engineering and Technology
Bachelor of Science (BSc), Electrical and Electronics Engineering
Concordia University
Master's degree, Information Systems Security
SKILLS
ABOUT MOHAMMAD ISHFAQUE JAHAN RAFEE
As a Cyber Security Analyst at CMiC, with over four years of experience in security and decade plus in IT & Cloud, the focus is on enhancing cloud security and proactively addressing potential vulnerabilities in infrastructure configurations. Contributions include leveraging threat modeling to identify risks, collaborating with vendors to address solution gaps, and investigating security incidents using Azure Sentinel. The role also involves refining incident response strategies, ensuring compliance with SOC2, ISO 27001, and CMMC standards, and working cross-functionally to shape the company\'s security roadmap. Expertise in cloud platforms such as AWS and Oracle Cloud Infrastructure underpins the ability to assess and implement robust security controls. With certifications including CISSP, AWS SA-Pro, and AWS Security - Specialty, efforts are directed toward driving compliance and fostering a secure digital environment. Passionate about advancing organizational security measures, particularly through innovative approaches to infrastructure and policy development.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.