Nafila Afrin

Background

About Nafila Afrin

Results-driven Cybersecurity Engineer with 7 years of experience in designing, implementing, and managing security monitoring services across OT/IT plants, global manufacturing, and aviation industries. Skilled in security operations, threat detection, incident response, and automation within on Prem, Azure, google cloud platform and AWS and environments. Adept at building and fine-tuning detection tools, automating processes, and aligning security initiatives with business objectives. Currently preparing for CISSP to further enhance leadership and technical proficiency. Security Operations (Security Engineering Lead): Security Monitoring & Compliance: Led end-to-end monitoring services for critical infrastructure clients, ensuring threat detection, regulatory compliance, and improved security posture through continuous assessments and tuning. Threat-Informed Defense Strategy: Conducted in-depth threat profiling, mapping industry-specific attack vectors using a threat-informed defense approach. Prioritized controls based on top-targeted sectors and actively exploited vulnerabilities. Log Source Integration: Onboarded diverse log sources from on-prem, AWS, Azure, and GCP into SIEM platforms like Splunk and Azure Sentinel. Enabled centralized, real-time visibility across complex infrastructures. Custom Detection Rule Development: Built and deployed client-specific detection rules to rapidly identify threats. Improved response times and minimized exposure through enhanced alert accuracy. Threat Modeling & Detection Engineering: Ran quarterly threat modeling exercises using MITRE ATT & CK to evolve detection use cases and identify emerging risks. Ensured that detection strategies remained current and resilient. Security Automation & SOAR Implementation: Deployed automation via Azure LogicApp to streamline incident response, threat enrichment, and reduce manual intervention Governance: • Developed cloud security policies and baseline documents based on strategic considerations and specific requirements for a defense and public security sector. • Conducted security awareness training sessions to ensure compliance adherence across the organization. Solution Architect • Conducted design reviews and assessed AWS Landing Zone setups, contributing to the development, enforcement, and compliance of security policies, procedures, and standards. • Demonstrated strong expertise in cloud platforms such as AWS and Azure, ensuring the implementation of robust security measures.