Download My Résumé
MD. Taki Yasir Faraji Sadik · North York, ON, Canada · [email protected]
You can download my résumé as a PDF, or scroll down for the online view.
Online View
Professional Summary
Cybersecurity and IT infrastructure professional completing a Cyber/Electronic Operations postgraduate degree at Seneca College of Applied Arts and Technology, with hands-on experience in incident triage, SIEM monitoring, and vulnerability assessment. Skilled in documenting and escalating security events, performing threat analysis, and coordinating remediation efforts. Backed by multiple industry certifications, a self-built homelab in Linux administration, cloud infrastructure, and automation, and an active defence-hardware practice: building passive radar, acoustic, and seismic sensor nodes, ROS 2 rovers, and secure fleet-update pipelines mapped to real Canadian Armed Forces requirements (Defence Drone Initiative, Army MINERVA challenges).
Work Experience
Information Technology & Security
- Monitor security systems and databases, triaging alerts and escalating events per defined SOPs
- Perform ongoing threat assessments and vulnerability analysis using industry tools and databases
- Coordinate with stakeholders to document and resolve security incidents, maintaining detailed logs
- Apply SEO and digital analytics skills to support threat intelligence reporting and data aggregation
- Mapped end-to-end SOC alert triage workflow across Splunk and AlienVault; identified 3 bottleneck points and shipped automated enrichment pipelines reducing MTTR by 25%
- Built Python scripts and Splunk SPL queries to correlate threat intelligence feeds, eliminate false positives at scale, and process 30+ daily alerts with minimal human intervention
- Designed human-in-the-loop validation checkpoints for high-severity alerts with safety guardrails; created runbooks enabling junior analysts to operate independently
- Apply Cyber Threat Intelligence (CTI) guidelines to daily data center operations, ensuring physical infrastructure is resilient against emerging hardware and network-level threats
- Audit server racks, cabling, and localized network equipment to detect anomalies, rogue devices, or unauthorized Layer 1 connections
- Execute urgent firmware updates and hardware remediations on bare-metal servers based on active Indicators of Compromise (IoCs) and threat feeds
- Partner with engineering and SOC teams to translate high-level threat intelligence into practical security procedures for on-site hardware deployments
- Led end-to-end incident lifecycle, including detection, triage, prioritization, escalation, resolution, and post-incident review
- Provided cloud support engineering at Dominion Centre, 222 Bay St., Toronto
- Monitored and maintained network infrastructure, identifying and resolving connectivity and performance issues
- Assisted with network documentation, topology diagrams, and capacity planning
- Performed packet analysis and traffic monitoring using IDS to detect anomalies and support incident investigations
- Supported deployment and configuration of network hardware and cloud-connected devices
- Architected VLAN-segmented network maintaining 99%+ uptime for healthcare systems; documented data flows for compliance and operational continuity
- Deployed firewalls, VPNs, and least-privilege access policies; performed Wireshark packet analysis to diagnose complex failures
- IT Service Delivery, Technical Assistance, and customer support at Vaughan, ON location
- Provided top-tier IT Service Delivery and Technical Assistance to TD employees, ensuring minimal downtime for critical banking operations
- Managed the end-to-end lifecycle of IT support tickets using ITSM platforms (e.g., ServiceNow), maintaining strict adherence to enterprise Service Level Agreements (SLAs)
- Troubleshot and resolved Tier 1/Tier 2 software, hardware, and network connectivity issues within a highly secure and regulated corporate environment
- Managed server alerts and system issues on Linux and Windows Server with priority-based response, maintaining first-time fix rates to minimize service disruption
- Performed daily maintenance including backup verification, system updates, patch application, and performance monitoring
- Leveraged SQL and cloud computing skills to support data workflows and reporting systems
- Documented recurring issues and contributed to runbook development for the operations team
- Architected Terraform modules with GitHub Actions for self-service Azure infrastructure provisioning, collapsing multi-day provisioning into minutes
- Administered Entra ID IAM, RBAC, and Conditional Access; implemented OAuth 2.0 and certificate-based authentication across business systems
- Connected cloud storage, compute, and identity platforms via APIs and automation scripts, reducing manual errors and improving deployment reliability
- Monitored multi-camera CCTV and IP surveillance systems across commercial facilities, ensuring 24/7 security coverage
- Detected and reported suspicious activity, coordinating with on-ground security teams for rapid response
- Maintained surveillance logs and generated shift incident reports for management review
- Conducted continuous CCTV Monitoring for high-security premises, actively identifying anomalies, unauthorized access, and physical security threats
- Executed rapid incident response protocols, escalating verified threats to on-the-ground security teams and management in real-time
- Monitored hybrid physical and digital access points, cross-referencing visual data with access logs to ensure comprehensive site security
- Monitored CCTV systems and performed regular property inspections
- Databases, Administration, and digital content management
- Directed digital publication operations, overseeing backend Databases to ensure the integrity, organization, and efficient retrieval of digital assets
- Provided comprehensive Administration for digital platforms and Content Management Systems (CMS), configuring user access controls, permissions, and operational workflows
- Bridged the gap between technical and creative teams, troubleshooting platform issues and optimizing database structures to improve site performance
Retail, Hospitality & Other
- Promoted from Customer Service Specialist; managing visual merchandising and in-store presentation
- Administration, Amazon Web Services (AWS), and retail systems management
- Supervised daily operations; trained non-technical staff on new systems, improving team efficiency and cross-functional communication
- Troubleshot and resolved customer issues related to orders, payments, and accounts; escalated complex cases to internal teams using CRM tools
- Leveraged AWS-backed retail systems and internal network services to access customer data and process resolutions efficiently
- Coordinated with cross-functional teams to ensure timely problem resolution and positive customer outcomes
- Promoted H&M’s corporate image and brand through helpful and knowledgeable customer service
- North York, ON · On-site
- Tracked all kitchen supplies and ingredients along with beverages to guarantee continuous availability for the team
- Etobicoke, ON · On-site
- Supported kitchen operations at 100 Yonge St, Toronto
Skills
| Category | Technologies & Tools |
|---|---|
| Security & SOC | SIEM (Splunk, AlienVault), Threat Intelligence, Incident Triage, Digital Forensics (live/dead box), CCTV/IP Surveillance, Vulnerability Management, OPSWAT ICIP, MasterCard Cybersecurity Framework, EDR, IDS |
| Defence Hardware & Robotics | SDR (KrakenSDR, RTL-SDR), passive radar (pyAPRiL), ADS-B/AIS reception, ROS 2 (robot_localization EKF), ArduPilot/Pixhawk, ESP32 + LoRa mesh (915 MHz), Raspberry Pi, acoustic beamforming (GCC-PHAT), edge AI (Hailo HAT+), thermal imaging (FLIR Lepton), TPM 2.0 secure boot, signed OTA updates, MQTT/Zenoh, Kalman-filter sensor fusion |
| Networking | TCP/IP, VLANs, Firewalls, Routing & Switching (CCNA in progress), WLAN/Wi-Fi 802.11, SDN, Cisco IOS, APNIC Routing, LAN/WAN Design, DNS (Pi-hole + Unbound) |
| Systems & Servers | Linux (Ubuntu, RHEL), Windows Server (AD, DHCP, DNS), Proxmox, VMware, Hyper-V, VirtualBox, Docker, Server Monitoring, Backups, Patch Management, Operating Systems, IT Fundamentals |
| Cloud & Virtualization | Azure (AZ-900 certified), AWS (Cloud Practitioner + Security), Nextcloud, Self-hosted Infrastructure, Hybrid Cloud Environments |
| Databases | SQL, MySQL, PostgreSQL, MS SQL Server, Cloud Database Deployment (Azure) |
| Programming & Scripting | Python, Bash, PHP, JavaScript, Rust, Splunk SPL, automation of OS deployment, network config, and security workflows |
| Tools & Platforms | Git, GDB, Make, Visual Studio, Eclipse, AJAX, Docker, SMTP, Web Hosting, AI Model Training & Deployment |
Certifications & Licences
| Certification | Status | Issuer |
|---|---|---|
| Cybersecurity Defense Analyst | May 2026 | Cisco |
| Computer Networks and Network Security | Apr 2026 | IBM IX |
| Azure Cloud Architecture (AZ-900) | Active | Microsoft |
| IBM IX Operating Systems: Administration & Security | Apr 2026 | IBM IX |
| Diploma in Ethical Hacking | Mar 2026 | Alison |
| Foundations of Cybersecurity | Feb 2026 | |
| IBM Cybersecurity Tools & Cyberattacks | Feb 2026 | IBM |
| Accelerate Your Job Search with AI | Feb 2026 | |
| AWS Academy Graduate, Cloud Security | Nov 2025 | Amazon Web Services |
| AWS Cloud Practitioner | Active | Amazon Web Services |
| Certified Information Professional (CIP) | Mar 2026 · exp. Feb 2027 | OPSWAT Academy |
| Critical Infrastructure Protection (ICIP) | Mar 2026 · exp. Mar 2027 | OPSWAT |
| Cybersecurity Virtual Experience | Mar 2026 | MasterCard (Forage) |
| EASY Framework for Threat Intelligence | Mar 2026 | AttackIQ |
| Introduction to Model Context Protocol | Mar 2026 | Anthropic |
| Cisco Routing Course | Mar 2026 · exp. Mar 2029 | APNIC Academy |
| MSSQL Certification | Active | Microsoft |
| ISC2 Candidate (CC) | Aug 2025 · expired Aug 2026 | ISC2 |
| Business Case for Workplace Wellness | Jun 2025 | CCOHS |
| Integrity in Action | Jun 2025 | Seneca |
| Plagiarism and Citation | Jun 2025 | Seneca Polytechnic |
| Ontario Security Guard Licence | Active | Ontario Gov. | #50059604 |
| Smart Serve Ontario | Active · exp. Mar 2029 | Smart Serve Ontario | #240328413205 |
| First Aid & CPR Certified | Active | - |
| CompTIA A+ | Active | CompTIA |
| CCNA Fundamentals | Active | Cisco Networking Academy |
| CompTIA Security+ | In Progress | CompTIA |
Homelab & Personal Projects
| Project | Tech | Details |
|---|---|---|
| Canadian Defence Hardware Program (11 builds) | KrakenSDR, ESP32 LoRa, ROS 2, ArduPilot, Hailo, TPM 2.0 | View |
| Sky: Passive Aerial Early-Warning Node | KrakenSDR, pyAPRiL, RTL-SDR ADS-B, MQTT | View |
| GPS-Denied Navigation Rover + Convoy Mesh | ROS 2, EKF, LiDAR, BNO085, ESP32 LoRa | View |
| Thermal Search-and-Rescue Drone | ArduPilot, FLIR Lepton, Hailo AI HAT+, MAVLink | View |
| Multi-Domain Common Operating Picture | MQTT/Zenoh, Kalman fusion, Ed25519, Kubernetes | View |
| Chakor, Self-Hosted AI Workspace | Next.js 15, TypeScript, SQLite, llama.cpp, Ollama | GitHub |
| Kubernetes Infrastructure | Kubernetes, Ubuntu VMs, Bash, Docker Compose, Prometheus | View |
| Private AI Model (ai.tyfsadik.org) | Ollama, Docker, RHEL, TLS, ELK Stack | View |
| Proxmox Homelab | Proxmox VE, KVM, LXC | View |
| Self-Hosted DNS (Pi-hole + Unbound) | DNS, Linux | View |
| Private Email Server (@tyfsadik.org) | Postfix, Dovecot, DKIM | View |
| Self-Hosted Cloud Storage (cloud.tyfsadik.org) | Nextcloud, Docker | View |
| Self-Hosted Photo Server (photo.tyfsadik.org) | Immich, Linux | View |
| Public Search Engine (search.tyfsadik.org) | SearXNG, Docker | View |
| Public Wiki Server (wiki.tyfsadik.org) | Kiwix, Docker | View |
| Arch Linux Remote Desktop via WSL2 ★5 | Arch, WSL2, XRDP | View |
| Depot Gato (Tower Defense Game) | Godot 4, GDScript | View |
| HomeBound Aisha (Business Website) ★4 | HTML, CSS, JS | View |
Education
Grade: 3.56
Grade: 3.92
Volunteering
Civil Rights and Social Action, Once a Cadet, always a Cadet
Arts and Culture, “সেবার জন্য সদা প্রস্তুত থাকতে যথাসাধ্য চেষ্টা করা”, “Be Prepared”