Abiodun Salami

• I am dependable with over eleven (11) years of remarkable experience delivering exceptional enterprise Application Support, Assurance and Technology Support Services at leading institutions across North America and Africa. My specialty involves:
• Passionate, detail-oriented Cybersecurity professional with three GIAC cybersecurity trainings, certifications and a background in application support at the second largest ATM Software retail organization in the world and also card payments schemes.
• Excellent communicator who is particularly adept at researching and writing technical policies as well as delivering security awareness training programs to both technical and non-technical audiences
• Skilled in Network, scripting, and Cloud Security interpretation and diagnosis.
• Analyze incoming security events based on different data points; network, endpoint, and log sources expediently, consistently, and accurately.
• In-depth experience in collecting, analyzing, and escalating security events; responding to computer security incidents, and/or collecting, analyzing, and disseminating cyber threat intelligence
• Knowledge of tools used in penetration testing, security event analysis, incident response, computer forensics, network and endpoint architecture, malware analysis or other areas of security operations
• Understanding of security frameworks, such as ISO 27001, NIST 800-53, HIPAA/HITECH, or PCI DSS Fundamental understanding of networking, including TCP/IP protocols and network topology
• Experienced in various operating systems, including Windows and Linux.
• Understanding of security controls for common platforms and devices, including Windows, Linux, OSX and network equipment
• Willingness to run a security incident to completion; detect, work with team members, and communicate effectively with internal and external team parties throughout the process.
• Steer complex investigations within your area of expertise, and leverage your security knowledge to engage the other experts within other disciplines appropriately
• Contribute your security expertise using the development platform to elevate more precise signal with minimal noise
• Highly skilled at investigating root-cause analysis of incident and problems, Investigation, very analytical with outstanding diagnostic skills.
• Mitigating risks that threats and vulnerabilities pose to enterprise systems by identifying and working with respective business and technology units on security controls aligned with business strategy.
• Passionate about preventing full-blown breaches by proactively detecting and containing yet-to-be- discovered malicious activities up the kill chain.
• Detecting and halting cyber-attacks, limiting business impact and preventing future attacks.
• Strong understanding of security principles and technologies in networking, architecture, risk management, and product development as they apply to Operational Technology.
• Familiarity with global industry cybersecurity best practices, frameworks, and standards.
• Directs and ensures the development and implementation of security controls and practices including Internet, Intranet, Extranet, network, application, remote access, and wireless technologies.
• Responsible for ensuring the use and application of End Point security tools, Internet filtering and Data Loss Prevention tools, Event and log management tools and Privileged Account Management tools.
• Responsible for incident response documentation and other policy/governance documentation
• Involved in the management implementation, maintenance and support of Public Key Infrastructure (PKI) and Strong Authentication solutions and strategy.
• Maintains quality service by establishing and enforcing organization standards and also manages, reviews, assigns, delegates and directs the work functions of employees.
• Responsible for coordinating and enforcing systems, policies and procedures.
• Undertakes corrective action with respect to employees in conjunction with the Manager and Human Resources.
• Provides information, orientation, training, instruction and supervision as required to assist employees in performing their work functions.
• Monitors compliance of systems and networks with regulatory organizations such as the Payment Card Industry to ensure the Corporation is compliant.
• Responsible for the development of all policies, strategies, procedures and standards related to Information Security to ensure compliance with industry standard practices and a Corporate wide approach to security.
• Responsible for Information Security standards being adhered to and recommends corrective actions as required.
• Performs and recommends Risk Assessments for all major update/upgrade of systems and applications.
• Manages and ensures vulnerability and risk assessments of corporate assets and analyze activity logs of the various systems as part of preventive measures.
• I have over ten (10) years of remarkable experience delivering exceptional enterprise Application Support, Assurance and Technology Support Services at leading institutions across North America and Africa. My specialty involves:
• Participates in the review and adherence in the overall ITS governance.
• Manages and/or participates in projects in various roles and responsibilities.
• Conducts performance management reviews of project resources.
• Conducts and/or assists in the performance management and evaluation of employees.

• GCIH: GIAC Certified Incident Handler, 09/2022
• GSEC: GIAC Security Essentials Certification, 06/2022
• GFACT: GIAC Foundational Cybersecurity Technologies, 04/2022
• Microsoft Azure Administrator Certified, 02/2022
• Microsoft Azure Fundamentals Certified, 01/2022
• Cyber Security Foundation Professional Certification, 06/2021
• Enterprise Design Thinking Practitioner IBM, 04/2020
• Security Certified Network Specialist ICSI (International Cybersecurity Institute), 09/2020
• Scrum Fundamental Certified, 07/2019
• ITIL Foundation V3, 06/2015
• ORACLE Database 11g SQL Associate, 08/2011

SANS Capture the Flag (CTF) Participant December 2021 Ethical Hacker, Hackers for Change May 2021- Present Mastercard Cyber Range Capstone Program: Incident Response & Ransomware September 2022 Mandiant, AWS and Sunlife (CTF) Second Position Oct 2022

• SANS Institute: SEC 504, Hacker Tools, Techniques, Exploits and Incident Handling.
• Cyber Range Incident Response and Ransomware Scenarios
• Computer and Hacking Forensics, E-learning, Cybrary
• SANS Log4Shell Vulnerability Solutions Forum
• SANS IAM, MFA, Password Management Solutions Forum
• SANS Cloud Security Exchange 2022
• Certified Cisco Networking
• Amazon Web Services Training
• COBIT5
• ISO 20000 Foundation