Sheraz Ahmed Siddiqui

Lead Application Security Engineer @Ambac

Tampa, FL, US

Evaluate, implement, and manage security tools and technologiesaimed at safeguarding applications. This may include web applicationfirewalls (WAFs), intrusion detection systems (IDS), security informationand event management (SIEM) solutions, etc- Utilizing sophisticated tools to perform comprehensive threatassessments and vulnerability scans- Developing and overseeing incident response protocols, leading effortsto manage and resolve security breaches- Implementing robust monitoring solutions and conducting detailed loganalysis to identify and address potential security threats- Conducting audits and assessments to ensure compliance with relevantindustry standards and regulations- Create, oversee, and update organization-wide information securitypolicies, standards, guidelines, and procedures to ensure compliance withlocal, state, federal regulations, and industry standards such as PCI DSSand ISO 27001- Identify, assess, and mitigate IT risks. Develop and manageframeworks, processes, and tools necessary for IT risk management.Ensure compliance with regulatory requirements, including PCI DSS andISO 27001 standards- Prepare detailed reports outlining findings, risk assessments, andrecommended remediation strategies. Communicate findings to technicaland non-technical stakeholders- Implemented Cloud Security best practices within organization thisincludes Dockers, Kubernetes containers best practices.