Portfolio – MD shahidullah

Portfolio

Professional Cybersecurity Project Portfolio

Designed and implemented a centralized Security Operations Center (SOC) with SIEM/SOAR integration for airline, payment gateway, OTA, and eCommerce platforms to improve threat detection and incident response.

Led PCI DSS and PA-DSS security implementation for payment systems including vulnerability management, penetration testing, encryption controls, and compliance documentation.

Managed Splunk SIEM administration, log validation, use-case correlation, and threat hunting operations across Bangladesh and Myanmar customer environments.

Conducted enterprise-wide VAPT activities, remediation planning, and security hardening for applications, infrastructure, and endpoint systems.

Implemented cybersecurity governance aligned with ISO 27001, NIST CSF, DORA, GDPR, HIPAA, FedRAMP, and PCI DSS frameworks for multinational operations.

Developed secure disaster recovery and business continuity plans for global e-GP and procurement platforms serving 65+ countries.

Designed and maintained enterprise vulnerability management processes including automated scanning, remediation tracking, and security reporting.

Architected and deployed secure network segmentation, firewall, IPS, DLP, and endpoint security solutions for enterprise infrastructure in Qatar operations.

Established secure software development lifecycle (SSDLC) practices integrating security controls into DevOps pipelines and development processes.

Implemented user authentication, authorization, and secure access management systems for global procurement and e-Governance platforms.

Conducted cybersecurity awareness campaigns, phishing simulations, and staff training programs to improve organizational cyber resilience.

Implemented enterprise encryption and data protection mechanisms including DLP, secure data handling, and compliance-driven security controls.

Performed vendor security reviews, risk assessments, and compliance validation for third-party suppliers and technology partners.

Deployed and managed EDR/XDR technologies for proactive malware detection, endpoint monitoring, and incident response automation.

Developed and implemented enterprise information security policies, standards, governance processes, and ISMS controls aligned with ISO 27001.