Afeez Yusuff
Maidstone
Summary
Network Security Engineer with over 10 years of experience supporting enterprise network security operations and implementing secure infrastructure solutions. Proven expertise in firewall administration, VPN technologies, network monitoring, threat detection, vulnerability remediation and incident response within enterprise environments. Certified in Cisco, Check Point, Fortinet and Palo Alto technologies, with strong experience supporting infrastructure upgrades, firewall refreshes, network microsegmentation and datacentre migration projects. Recognised for delivering reliable operational support, resolving complex technical issues and maintaining secure, resilient network services.
Overview
1
1
Certification
10
10
years of professional experience
Work History
Network Security Engineer
Saga Group
05.2022 - Current
- Supported and maintained enterprise network security infrastructure, implementing security controls, managing firewall technologies, responding to security incidents and contributing to infrastructure enhancement projects to ensure secure and resilient business operations.
- Investigated and resolved complex network and security incidents, reducing service disruption through effective troubleshooting.
- Configured and maintained enterprise firewalls, VPNs and intrusion detection systems to strengthen network security.
- Implemented east-west network microsegmentation to improve application security and reduce lateral movement.
- Analysed network traffic to identify malicious activity and supported rapid incident response.
- Produced operational and security reports to support service improvement initiatives.
- Managed user access controls in accordance with least privilege principles.
- Performed daily backup verification and disaster recovery support.
- Researched emerging cyber threats and recommended mitigation strategies.
SOC Analyst
Orange Cyberdefense UK Ltd
08.2016 - 05.2022
- Provided 24/7 security monitoring and incident response for enterprise customers while maintaining high service availability.
- Analysed SIEM alerts and security logs to identify threats and vulnerabilities across customer environments.
- Implemented firewall policies and security controls to mitigate DDoS attacks and strengthen perimeter security.
- Investigated security incidents and coordinated remediation activities with technical teams.
- Managed change requests and infrastructure updates within strict SLA requirements.
- Applied firmware upgrades and security patches across network security appliances.
- Conducted vulnerability assessments and recommended remediation aligned with internal security policies.
- Managed incident tickets from identification through resolution while maintaining customer communication.
- Supported continuous improvement initiatives by updating operational procedures and security documentation.
Education
Master's Thesis - Factors Affecting Phishing Susceptibility of Students
University of Turku
FinlandBachelor's Thesis - Network Monitoring Using Nagios as an Example Tool
Centria University of Applied Sciences
FinlandSkills
- Network Security
- Firewall Administration
- VPN Technologies
- Network Segmentation
- Threat Prevention
- IDS/IPS
- Access Control
- Network Hardening
- Networking
- TCP/IP
- LAN/WAN
- Routing & Switching
- NAT
- DNS
- DHCP
- VLANs
- Infrastructure
- Linux
- Azure
- VMware
- Incident Response
- Threat Monitoring
- Vulnerability Management
- Patch Management
- Change Management
- Security Monitoring
Certification
- Cisco Certified Network Associate (CCNA)
- Cisco Cybersecurity Operations (SECOP)
- Fortinet Network Security Expert (NSE4)
- Check Point Certified Security Expert (CCSE)
- Check Point Certified Security Administrator (CCSA)
- Check Point VSX Specialist (CCVS)
- Check Point Certified Threat Prevention Specialist (CTPS)
- Palo Alto Network Security Administrator (PCNSA)
- Symantec Certified Specialist – ProxySG
- GDPR Compliance
- PCI DSS Compliance
- Fire Marshal & First Aid
Projects
- Enterprise Datacentre Migration, Participated in the migration of on-premises infrastructure to a colocation facility while maintaining service availability and network security.
- IPSec VPN Migration, Supported the migration of enterprise Site-to-Site VPN connectivity with minimal downtime.
- Network Microsegmentation, Implemented network segmentation policies to improve east-west traffic security and reduce attack surfaces.
- Check Point Firewall Refresh, Assisted in deploying and upgrading Check Point firewalls, improving performance, resilience and security compliance.
Accomplishments
- Implemented enterprise firewall policies aligned with Information Security governance requirements.
- Supported application server redesign for enterprise network microsegmentation.
- Successfully achieved Check Point Threat Prevention, IPS and VSX certifications.
- Contributed to continuous improvements in security compliance and operational resilience.
References
Available upon request
Timeline
Network Security Engineer
Saga Group
05.2022 - Current
SOC Analyst
Orange Cyberdefense UK Ltd
08.2016 - 05.2022
Master's Thesis - Factors Affecting Phishing Susceptibility of Students
University of Turku
Bachelor's Thesis - Network Monitoring Using Nagios as an Example Tool
Centria University of Applied Sciences