I am a seasoned lead IT security engineer stationed on the cyber security team at a finance organization. Additionally, I am a member of the ISACA Dhaka Chapter, the Eccouncil, the Bangladesh Computer Society, and many other international organizations. I have a robust fifteen-year career in cybersecurity, software development, database, networking, infrastructure, IoT, IT audit, cybersecurity consultant, and project management. I have technical, strategic, and leadership roles in different countries. I specialize in IT policy development, system administration, information security, data security, and IT audits. My expertise encompasses IT strategy, vendor management, partner management for OEMs, business continuity planning (BCP), disaster recovery planning (DRP), IT audits, digital forensics, incident response, and security operations centers. I am a certified professional in CISA, CEH, CHFI, CSA, PRINCE2, CMMI, ISMS, Deep Security, Risk Management, PCI DSS, PA DSS, Six Sigma, ITIL, COBIT5, Web Application Security, Mobile Apps Security, Database Administrator (DBA), Networking, Governance Risk and Compliance (GRC). Adept in various programming languages, database administration, and operating systems, I have successfully contributed to multiple software migration and development projects. I am also an accomplished researcher, having published articles in reputable journals. My educational background includes an MSc in Information System Security, a BSc in Computer Science & Engineering, and a 4-year Diploma in Computer Engineering with outstanding result. I am also a candidate for a PhD. I am committed to excellence, reflected in my certifications, achievements, and active participation in professional societies, making me a valuable asset in global technology and cybersecurity.
About Me!
Hey, I am
MD SHAHIDULLAH
An ex-employee of 2 of the top 10 IT companies in the world
15+ years
of dynamic careers in different sectors globally
39+ Projects Successfully Done
RESEARCH EXPERIENCE & PUBLICATION
Certified Information Systems Auditor (CISA)
Certified Ethical Hacker (CEH)
Computer Hacking Forensic Investigator (CHFI)
Certified SOC Analyst (CSA)
ISO/IEC 27001
PCI DSS
Splunk 7.x (SOC, SIEM)
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
CMMI
Application Delivery Controllers
Database Management and Administration
Responsive Web Design & Development
THE 7 HABITS OF HIGHLY EFFECTIVE PEOPLE
ITIL (Information Technology Infrastructure Library) Foundation
Basic to Advanced Training on Sharepoint Server
ISO-20000
Six Sigma Yellow Belt
SITUATIONAL LEADERSHIP II
PRINCE 2- Foundation
PRINCE2 Practitioner
MistNet NDR 2021.9.1
Logrhythm Console
LogRhythm logo
LogRhythm Network Monitor for Analysts
LogRhythm logo
Intro to MistNet NDR
Certified Network Security Specialist
MCSA Windows Server 2016
Certified Business Analysis Professional Certification Training
COBIT 5
C#, ASP.net
Stellar Cyber Analyst
Trend Micro Certified Professional
Certified Secure Software Lifecycle Professional
Biography
A Study of the Challenges of Implementing Cyber Security Services and Solutions in the Bangladeshi Financial Sector
Vulnerability Assessment Penetration Testing (VAPT) for Web Applications
Reviewer of SEIP’s Cybersecurity Syllabus
Best Scout Leader Captain
Class Representative of MSc (BUP)
Multiple-time divisional athlete Champion
Multiple-time divisional swimming champion
6th Bangladesh National Scout Jamboree, 1999
Cricket school captain
Cricket-Club Captain
Debate Champion
District Scholarship
CERTIFICATIONS & TRAININGS
SKILLS & QUALIFICATIONS
Design, implementation and maintenance of Database
Developer, Patch Deployment
Design & Development of SQL Server
Windows Server & RedHat Linux Platform.
Experience in Wordpress, Dreamweaver, Photoshop and Illustrator
MS Project, MS Visual Studio
C/C++, C#.Net, ASP.Net, HTML, CSS, Java Script, PHP
Kali Linux, Nessus, Metasploit
Sqlmap, Burp Suite, Wireshark,
Nmap, Splunk, Alien Vault,
IBM QRadar, Acunetix, Netsparker,
Intruder, John the Ripper,
Aircrack-ng, W3af, Autopsy
Trend Micro, AWS Prisma
MITRE ATTACK, Symantec,
Threat Intel, A-APT
ACHIEVEMENT
INFORMATION SYSTEMS AUDIT COMPLETED
Multiple Banks
Multiple NBFIs
Telecom
Groups of Companies and Conglomerates