Ehsan Vesali

As a Cybersecurity engineer, my profession is to secure the organization's cyber environment. My skill set includes web application and Network penetration testing, hardening of operating systems and network devices, and running red-teaming operations based on the MITRE ATT&CK Matrix, as well as proposing security solutions in a technological environment. Moreover, I take delight in writing scripts and automation tasks in various languages.

Senior Cybersecurity Engineer [Full-Remote] at Golrang Industrial Group (en.golrang.com) (2021-07 – Present)

• Web Application and Network Penetration Testing
• Testing hundreds of web applications developed by Diversity Technologies
• Gained Domain Admin privileges using The Certify and The Mimikatz tools
• MITM Attack
• Vulnerability Assessment
• Via Nessus Vulnerability scanner, exploited vulnerabilities, and then reported to owners
• Patch Management
• Defined and implemented the Patch Management process for approximately 2,000 servers and 17,000 endpoints.
• Proactively identified applicable security patches and vulnerabilities based on the organization's asset inventory.
• Monitored vendor security updates and assessed their applicability to the organization's infrastructure.
• Automated patch notifications and communication workflows using Python scripts and ManageEngine Endpoint Central APIs.
• Monitored installed and missing patches across organizational assets and tracked remediation progress.
• Evaluated patch compliance and assessed the impact of missing security updates on the organization's overall security posture.
• Red Teaming
• Reconnaissance by LDAP queries and the BloodHound tool
• Token Manipulation
• Lateral Movement by Pass-The-Hash technique
• Bypass Kaspersky Anti-Virus
• Hardening Network Devices and Services based on CIS
• By Nipper and self-knowledge
• By the CIS benchmark Documents
• Hardening OS relies on CIS (Windows-Linux)
• By CISCatPro tools and self-scripting
• Automation processes by writing scripts (Python, PowerShell, and Bash scripts)
• Remove (Domain Users) from the Allow Logon locally policy from 17000 client workstations with PowerShell
• Integrate vulnerability scanners with Python
• Project Manager (increase the security level of Network services and reduce security risk)
• Hardening Active Directory Services based on CIS
• Secure Mail Server using SMG (Symantec Messaging Gateway)

Lecturer (Part-Time) at Nooranet Institute (nooranet.com) (2017-05 – Present)

• OSCP(Pen-200)
• Network Penetration Testing
• CCNA (Routing & Switching)
• Network+

Offensive Security Specialist at APK Group (apk-group.net) (2019-11 – 2021-07)

• Web Penetration Testing
• Network Penetration Testing
• Red Teaming
• Security Analyst
• SOC Engineer

IT SUPPORT ENGINEER at Fanavari Ertebatat Hamgara (2014-10 – 2015-07)

• Network Technician
• Implemented SolarWinds as the Network Monitoring System
• Implemented Cisco Prime for Managing Network Devices
• Configured switches, routers, and Firewall
• Troubleshooting and Management of Network Infrastructure
• Maintenance of Operating Systems

Bachelor of Engineering (B.E.) in Computer Software Engineering – Islamic Azad University Central Tehran Branch, Tehran (2011-09 – 2015-06)