KELSIEM

Zak Siddiqui is the CTO at KELSIEM based in Sydney, Australia. He spends his time helping companies define and achieve their security goals using next-generation technologies. Unsatisfied by existing SIEM products, Zak embarked on a project to come up with something better, faster, and cheaper. As Chief Software Architect of KELSIEM, he helped launch KELSIEM REALTIME SECURITY, a managed cloud SIEM service. Zak enjoys tinkering and exploring new technologies to embrace the future, break existing paradigms, and sharing his journey with others.

Chief Technology Officer

UTS: University of Technology Sydney

This is a Robert Walters Consulting engagement.
- Perform a complete review of UTS Information Security Architecture, with recommendations for a 3-year security roadmap.
- Performed a review of security controls against ISO27001 security objectives.
- Recommended additions and changes to UTS security controls.
- Developed, evaluated and documented metrics for reporting and investigation purposes.
- Produced a successful business case for Operational Intelligence.
- Scoped, design and built a Proof of Concept ELK-based Operational Intelligence Platform.
- Hired a permanent IT Security Manager for UTS.

Security and Operational Intelligence Consultant at UTS

Managed the IT Security team as part of a Robert Walters Consulting and NTI Consulting engagement.

Performed an extensive formal review for UTS, resulting in the deliverable called “Capability and Practices Review of IT Security, Governance & Compliance”, covering Security Objectives and Controls based on ISO 27001 and the Capability Maturity Model.

Developed visually appealing metrics of incidents and investigations for management reporting purposes.

Provided risk-based security advice to senior management.

This is a Robert Walters Consulting and NTI Consulting engagement.

Produced a successful business case for Operational Intelligence.

Scoped, design and built an ELK-based Operational Intelligence Platform.

Perform a complete review of UTS Information Security Architecture, with recommendations for a 3-year security roadmap.

Hired a permanent IT Security Manager for UTS.

Consulting Manager, IT Security Governance and Compliance

University of New South Wales

- Until May 2014, I managed the Security Operations Team, plus dotted line to the Security Architects.
- Amazon Web Services (AWS) and Microsoft Azure Cloud Security consultancy.
- Explained technical solutions to non technical stakeholders of differing seniority levels
- Risk assessments
- Incident response
- Forensic Analysis (Unix, Windows)
- Vulnerability Management (Nessus, Nexpose, Burp Suite Pro)
- Penetration testing
- Logging, SIEM and Correlation (McAfee ESM, Splunk, ELK: ElasticSearch, Logstash, Kibana)
- Management Reporting
- Leadership, Training, Mentoring
- Macro environment analysis (review new threats etc)
- IT Security SharePoint site management
- Remediation Management
- Established an IT Security Risk Forum.
- Managed security risk related matters (projects, incidents, threats). 
- Data Analysis and Reporting (Excel, SQL, Splunk, ElasticSearch)
- Drove a cultural and process change to move security engagement earlier in project lifecycle.
- Worked with an external partner to develop an Information Security Management System (ISMS).

Information Security Consultant; Information Security Manager

NTI Consulting

An IT Security and Cyber Security Operational Intelligence Services company that provides a Managed  Security and Operational intelligence service as well as Security Consulting.

In 2015 we released an exciting new cloud-based operational intelligence managed service that competes with advanced SIEM products and achieves 50-90% in operational savings for customers.

Calling Security Specialists and Data Analysts...we are hiring!

Director

Lloyds International

Responsible for delivering Secure Application Design Assurance implemented via a series of policy, processes, and culture changes.

Delivered the Information Security Assessment process, combining both policy-based and risk-based requirements, which also allows the opportunity for the business to consult with Information Security earlier in the requirements and design phases.

Consulted to projects on Security policy.

•	Installed, tested and deployed monitoring solutions with Splunk.
•	Created and configured management reports and dashboards.
•	Performed forensic investigations.
•	Consulted to projects on Security policy.
•	Delivered the Information Security Assessment process, combining both policy-based and risk-based requirements, which also allows the opportunity for the business to consult with Information Security earlier in the requirements and design phases.
•	Performed operational and reporting activities.
•	Responsible for delivering the Secure Application Design Assurance project, implemented via a series of policy, processes, and culture changes, including:
          o	Evangelising security amongst the application development managers.
          o	Establishing a new end-to-end Security Testing process (covering static, dynamic and penetration testing);
          o	Static Application Security Testing (Veracode);
          o	Dynamic Application Security Testing (HP Websense;
          o	Secure Code Reviews.

IT Security Consultant

Vodafone Australia

Responsible for leading a small team to deliver the Information Security Management Framework, a body of policies and standards based on ISO 27001 and 27002.

Consulted to Technology projects for Security Requirements, Design and responsible for Security Acceptance.

•	Commended for my leadership and contribution during a major security crisis where I performed multiple roles (2011).
•	Consulted to projects for Security Architecture, both for application and infrastructure projects as well as Information Security projects (2011-2012).
•	Contributed to PCI Risk Assessment and Remediation Planning (2011-2012).
•	Delivered an Information Security Management System (ISMS), covering comprehensive Policies and Standards based on ISO 27001 & ISO 27002. Collaboratively engaged with Business Systems, Operations, and Technology Strategy & Products.  Led a team of five people including external consultants to deliver the Information Security Management Framework.  Delivered this ahead of schedule, which I attribute to my diligence and repeated consistency in planning, execution, and reporting (2011 2012).
•	Escalated and facilitated the fast-tracking a remediation of a major privacy risk.
•	Following the delivery of the ISMS, I established a process for managing proposed amendments as a BAU activity, which ended up substantially reduced the cost of reviewing the ISMS on a yearly basis.  
•	Performed Information Security Risk Audit (July 2011) and contributed to Network Health Check Security Audit (February 2012).
•	Provided security architecture service for 26 projects, gave security requirements and architectural guidance, performed detailed Threat Risk Assessments analysis, and provided advice on closing gaps against security requirements (2011 to 2012).
•	Represented Information Security in the development of our Next-Gen Datacentre Strategy (2011-2012).
•	Scoped and organised penetration tests with Vodafone Ethical Hacking team, Hungary.

Information Security Consultant

•	Audited Hutchison systems in preparation for the merger between Hutchison and Vodafone (2009). 
•	Contributed to a total of 44 projects, many of which were part of integration and transformation of two organisations into one following the merger of Hutchison and Vodafone (2008 to 2012).
•	Covered multiple projects simultaneously, some of which were large components of the integration program following the merger (2008-2011), including a major systems upgrade with total of over 150 application interfaces that had to be reviewed for security.
•	Designed solutions to align with Tibco and Oracle Fusion SOA platforms (2008 to 2011).
•	Performed a governance role in the transition from HP/NSN/EMS/ASG to Tech Mahindra as the new Managed Service Provider for Level 2 Support (2011).
•	Remediated 11 major security risks, which resulted in signification reduction of risk transfer fees charged by our managed services partner.

Application Security Architect

Telstra

•	Approved Project Designs before the commencement of the Build Phase, and validated built systems and Implementation Plans prior to project Go-Live, in line with traceability to Information Security Requirements.
•	Created High Level Designs for leading-edge hardware virtualised utility computing platform based on Egenera, IBM & Cisco hardware. 
•	Designed and implemented secure multi-tenant architecture for customer offerings.
•	Developed the architecture for Telstra’s Utility Computing platform.
•	Documented and maintained secure reference architecture, which is used by Architects and Solution Designers to construct solutions. 
•	Performed security reviews of projects and projects architecture and designs. 
•	Provided technical guidance to Architects, Solution Designers, Engineers, and project teams, with insight gained from past experience, as well as my broad technical knowledge.

Security Architect

•	Created a plan for integrating two systems management solutions with the enterprise ticketing system, documenting appropriate endpoints and interfaces.
•	Deployed an Enterprise Monitoring solution which provided End-to-End visibility of security related information and events.
•	Designed ITIL-oriented business processes to complement the Enterprise Systems Management strategy.
•	Integrated Microsoft Systems Management Server (SMS) into Microsoft Operations Manager and CA Unicenter.
•	Succeeded in reducing costs and simplifying project delivery by de-scoping unnecessary multiple phases of the project and delivering in a single delivery cycle, resulting in a recovery of 3 months of lost schedule.
•	Worked with management to modify business processes that would need to change for the implementation of new Enterprise Systems Management products.

Security Operations Monitoring Consultant

Australian Taxation Office

•	Created smart reports using SQL Reporting Services that allow the user to generate a report by computer group and by performance counter.
•	Designed a solution for an SQL data warehouse for the merging of security event data from multiple environments into one single data source.
•	Developed ASP.NET C# website with advanced management tools that hooked into the security events database. 
•	Documented business requirements for a new data-warehouse to store a 12-month history of every security event measured on 700 web, application, and database servers in the Distributed Systems Environment.
•	Organised and led a forum to analyse data from the custom reports I designed, and co-ordinated with colleagues to look at various problem areas, with particular emphasis on capacity planning and availability management.
•	Tuned SQL databases that ran Microsoft Operations Manager and Compaq Insight Manager to increase performance by 60-70%.

Enterprise Operations Consultant

BNP Paribas

•	Advised on best-practice standards in an environment with very high security and quality management requirements. 
•	Created a Business Continuity Plan and implemented Disaster Recovery systems for BNP New Zealand.
•	Designed and executed a parallel server migration after the sale of Cogent to BNP Paribas.
•	Established business requirements for disaster recovery for New Zealand through dialogue with the business groups.  I also advised the business of the impact and consequences of DR decisions, outlining costs, risks, and benefits.

Business Continuity Consultant

Chief Technology Officer @ KELSIEM | CISSP, CISM, CCNA | Master of Science (University of Technology, Sydney)

Zak Siddiqui is the Chief Technology Officer at KELSIEM based in Sydney, Australia. He spends his time Sydney and Brisbane helping organisations define and achieve their security goals using next-generation technologies. Zak enjoys exploring new technologies to embrace the future, discovering paradigm-breaking insights, and sharing his journey with others.

Taplio

Zak Siddiqui's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Zak Siddiqui's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Zak Siddiqui's Linkedin Analytics