Muhammad Riaz

Vulnerability management and cloud security specialist with over 8 years across regulated public sector, financial services, and multi-tenant MSSP environments. Owns the end-to-end vulnerability remediation lifecycle in Tenable, prioritising by real-world exploitability using CISA KEV, EPSS, and SSVC decision logic rather than raw CVSS.

Leads Cyber Essentials

Plus readiness and CIS benchmark hardening, and has delivered Zero Trust controls across the identity, device, data, and application layers. Reports risk weekly to senior leadership under ISO 27001 and NIST governance, across estates ranging from 500 to 15,000+ endpoints.

Cloud & EUC Engineer – Vulnerability Mgmt at Telana (2025-06 – Present)

Own the end-to-end vulnerability remediation lifecycle using Tenable, prioritising CVE exposure by real-world exploitability and threat intelligence — CISA KEV status, EPSS likelihood, internet exposure and asset criticality — applying SSVC-style decision logic rather than ranking on raw CVSS score, resulting in a [Insert %] reduction in critical vulnerability remediation time.

• Translate third-party penetration test findings into remediation plans, driving closure through internal teams and external suppliers and verifying via rescan.
• Lead Cyber Essentials Plus readiness, driving CIS benchmark hardening, device compliance, and the supporting audit evidence base, achieving [Insert %] estate compliance.
• Author weekly SIRO risk reports for executive-level oversight, aligned to ISO 27001 and NIST governance frameworks.
• Implemented Zero Trust controls across identity, device, data, and application layers — Conditional Access enforcing device compliance and approved client apps, Microsoft Purview sensitivity labels with supporting DLP policies, and Intune App Protection Policies blocking screenshot capture, cross-app data transfer, and save-to-personal-storage on mobile devices.
• Manage the Microsoft Intune estate: Windows Autopilot zero-touch deployment at 100% compliance, update rings for quality and feature updates, and Windows 365 Cloud PC provisioning.
• Developed PowerShell Intune Proactive Remediation script pairs to correct security configuration drift automatically, including restart enforcement to close long-tail patch non-compliance, saving [Insert Hours] of manual administrative effort monthly.
• Scoping and planning migration of Windows patching from Intune update rings to Windows Autopatch.
• Configure and support Always On VPN and secure remote connectivity.
• Serve as on-site escalation point for P1/P2 major incidents, producing formal RCAs and representing security at CAB and Problem Management boards.
• Act as Subject Matter Expert for Accessibility Technology and mentor junior engineers.

Security Analyst at Security Validation MSSP (UK) (2023-07 – 2025-05)

• Managed security baseline configurations, identity controls, and continuous threat monitoring across multiple client Microsoft 365 tenants.
• Designed and deployed standardised patch management and vulnerability remediation processes adopted across diverse client estates, increasing overall compliance metrics by [Insert %].
• Handled concurrent incident response cases — triage, containment, and eradication — across multi-tenant environments.
• Coordinated firewall rule changes, VPN and secure network connectivity implementations, and third-party vendor escalations.

Senior Support Analyst (SC Cleared) at Security Industry Authority (2022-01 – 2023-07)

Delivered 2nd and 3rd line technical support across the enterprise ICT environment, maintaining a [Insert %] SLA adherence rate.

• Administered Microsoft 365, Azure, Active Directory, SCCM, and Microsoft Intune.
• Managed WSUS patching, Group Policy Objects, and endpoint vulnerability mitigation using Nessus and Microsoft Defender.
• Oversaw mobile device management for the iOS estate via Apple Business Manager and Intune.

IT Support Analyst at Security Industry Authority (2020-01 – 2022-01)

Provided 1st and 2nd line support across the ICT estate, supporting Microsoft 365, Active Directory, SQL, CRM, and SharePoint services.

Information Technology Engineer at Janus Henderson Investors (2018-10 – 2019-06)

Provided desktop and infrastructure engineering support for global enterprise users across Active Directory, BitLocker, and Citrix environments.

• Managed ticket queues in ServiceNow, consistently resolving incidents within strict SLA targets.

Regional Support Engineer at Kent County Council (2017-12 – 2018-10)

Executed 2nd/3rd line engineering support and SCCM software deployments across regional facilities supporting 10,000+ endpoints.

IT Engineer at PwC (2017-02 – 2017-11)

Supported Windows Server/desktop infrastructure and assisted in the enterprise-wide Windows 7 to Windows 10 migration across 3,000+ endpoints.

Foundation Degree in Computational Science – London Metropolitan University