Farhan Ansari

Cyber Security Engineer with 5+ years of experience in designing, implementing, and managing enterprise security solutions to protect critical applications, networks, and information systems. Experienced in Security Operations (SOC), Wazuh SIEM administration, vulnerability assessment, penetration testing, incident response, threat hunting, and endpoint security. Strong understanding of network security, application security and industry best practices including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, CIS Controls, and ISO 27001.

Cyber Security Engineer - IKahuta Research Laboratories (KRL)

(2021-09)

• Designed, implemented, and maintained enterprise security controls to protect critical applications, network infrastructure, endpoints, and information systems from evolving cyber threats.
• Administered and optimized the Wazuh SIEM platform, including agent deployment, log collection, File Integrity Monitoring (FIM), Security Configuration Assessment (SCA), vulnerability detection, custom rule development, and Active Response automation.
• Developed custom Wazuh decoders, detection rules, and MITRE ATT&CK-based use cases to improve threat visibility, reduce false positives, and enhance detection capabilities.
• Performed application security assessments by identifying vulnerabilities aligned with the OWASP Top 10, including SQL Injection, Cross-Site Scripting (XSS), Broken Access Control, Insecure Authentication, and Security Misconfiguration.
• Reviewed application configurations, API security, and authentication mechanisms, providing security recommendations to development teams during remediation and deployment activities.
• Managed endpoint security using Kaspersky Endpoint Detection and Response (EDR) and Forcepoint Data Loss Prevention (DLP) to detect malicious activity, investigate endpoint incidents, and prevent unauthorized data exfiltration.
• Participated in security architecture reviews, technology risk assessments, and secure solution design for new applications and infrastructure deployments.

Cyber Security Intern - K-Soft

(2020-03 - 2020-08)

• Assisted in monitoring and analyzing security events to identify potential threats and security incidents.
• Supported vulnerability assessments of web applications and internal systems using industry-standard security tools.
• Performed basic penetration testing activities under the supervision of senior security engineers and documented findings with remediation recommendations.
• Assisted in log analysis, incident investigation, and endpoint security monitoring to identify suspicious activities.
• Participated in Windows and Linux system hardening, user access reviews, and security configuration assessments.

Bachelor of Science - Computer Science - University of Engineering & Technology (UET), Taxila (2016 - 2020)