Senior Security Analyst
Mohammad Mahmud
I secure identities, access and endpoints for regulated enterprises, from defense manufacturing to global finance.
- Current role
- Senior Security Analyst at TCS, supporting Bombardier
- Specialty
- Identity and access management
- Environments
- ITAR defense and global financial services
- Location
- New York, NY
I manage identity and access across directories, authentication, governance and privileged accounts. I also run endpoint protection and the certificate lifecycle, and I explain security controls in terms both technical and non-technical teams can act on.
Most breaches begin with a stolen or over-privileged account. That is why I specialize in identity.
Skills
From my résumé, grouped the way I use them.
Identity & Access Management
- Okta
- Microsoft Entra ID
- Active Directory
- LDAP
- SailPoint IdentityIQ
- CyberArk (PAM)
- MFA and SafeNet MobilePASS
- Access certifications
- Least-privilege controls
Endpoint Security & EDR
- SentinelOne deployment
- Threat monitoring
- Incident response support
- Endpoint compliance
Security Operations & Compliance
- PKI and certificate lifecycle
- Access reviews
- ITAR-regulated environments
- SOX and audit evidence
Cloud Security
- AWS (IAM, core services)
- Microsoft Azure
- Terraform and infrastructure as code
- Git
- CI/CD
Systems & Messaging
- Microsoft Exchange
- Lotus Notes
- Mainframe
- Unix
- Mailbox and distribution-list governance
- Legacy account migrations
Automation & Data
- PowerShell
- Python
- SQL
- Excel
- Tableau
Experience
-
TCS Client: Bombardier
Senior Security Analyst
- Own SentinelOne EDR deployment and maintenance across enterprise endpoints. Monitor alerts, investigate threats and support incident response in an ITAR-regulated defense environment.
- Administer identity and access across mainframe, LDAP, Unix and Lotus Notes, enforcing least-privilege access for a large enterprise user base.
- Support Okta and SafeNet MobilePASS multi-factor authentication to strengthen identity verification across defense systems.
- Manage Microsoft Entra ID and Exchange administration, including provisioning, distribution-list governance and legacy account conversions during migrations.
- Issue, renew and manage PKI certificates for secure communications across internal systems.
-
COOP Careers
Data Analytics Instructor
- Taught weekly Excel and Tableau sessions to 16+ fellows, building data cleaning and visualization skills.
- Worked with program captains on lessons and assignments, contributing to a 20% increase in program completion.
-
JPMorgan Chase
Cyber Security Specialist, Contract
- Managed privileged account access and credential vaulting in CyberArk, reducing unauthorized-access risk on high-privilege accounts.
- Supported SailPoint identity governance, including access certification campaigns and compliance reviews.
- Administered Active Directory accounts, groups and access policies with least-privilege standards.
- Issued and managed PKI certificates and supported application-level access administration.
-
Headstarter
AI Engineer
- Designed, built and presented 5+ machine learning models with a cross-functional team.
- Cut model training time from 5 hours to 5 minutes, a 98% reduction, by optimizing Google Colab workflows.
Credentials
Certifications
- Identity and Access Management
- AWS Certified Developer
- Microsoft Certified: Azure Developer
- Google Data Analytics Specialization
- The Complete SQL Bootcamp
- Back End Developer Certification
Education
- Hunter College, CUNYBachelor's degree, Computer Science
- COOP Careers FellowshipData Analytics · 2025
- ScrimbaFull Stack Developer · 2025
Languages
English, Bengali and Hindi
Ask a question
Get a quick answer about my experience, skills or certifications. Answers come from my résumé, and nothing you type leaves your browser.
Let's talk.
I'm open to conversations about identity and access management, security analyst and cloud security roles.