- Performed comprehensive compromise assessments for high-end government clients, identifying and analyzing existing and potential security breaches, vulnerabilities, and threat actors to ensure robust protection and incident response. - Conducting detailed compliance assessments based on national regulatory frameworks, including SAMA, CST and NCA, ensuring clients adhered to all relevant security and regulatory requirements. - Conducting IT & Cybersecurity audits to assess security controls, and compliance with regulatory standards, and identify areas for risk mitigation and process improvement. - Providing cybersecurity consulting to strengthen clients' security posture through risk assessments, development of policies and procedures, and compliance with industry

Managed operations within a 24/7 Security Operations Center, leveraging IBM QRadar, Wazuh, and LogRhythm SIEM platforms to swiftly triage and investigate alerts.Spearheaded the development and execution of use cases aimed at identifying trending threats, fine-tuning offenses to mitigate noise and enhance detection capabilities.Applied expertise in MITRE ATT&CK and CKC frameworks to meticulously map real-world attack scenarios, ensuring comprehensive threat coverage.

Monitoring SIEM alerts along with various security control dashboards for threat detection.Conducted proactive threat hunting initiatives using diverse tactics to fortify the environment against evolving threats, employing advanced analysis techniques.Conducted in-depth analysis of phishing emails, meticulously documenting findings and generating comprehensive reports for stakeholders.Played a pivotal role in compiling and escalating the latest threat advisories and Indicators of Compromise (IOCs) to relevant teams, facilitating rapid response and mitigation efforts.Providing on-call assistance to users regarding incidents and Security operationsContributed significantly to incident response planning, meticulously documenting SOC playbooks to streamline response procedures and enhance organizational resilience against cyber threats.

Acquired solid foundation in information security principles, emphasizing protection of sensitive data, systems, and networksEmphasized importance of safeguarding information confidentiality, maintaining data integrity, and ensuring availability to authorized usersCompleted comprehensive training in networking fundamentals, covering TCP/IP protocols, subnetting, routing, and switchingReceived comprehensive training on various information security compliance standards such as GDPR, HIPAA, PCI DSS, NIST Cybersecurity Framework, and SOXReceived specialized training on CIA triad, focusing on strategies to uphold data confidentiality, integrity, and availabilityEmphasis on ensuring sensitive information remains secure and accessible only to authorized individualsEngaged in in-depth training on defense-in-depth strategies, emphasizing importance of implementing multiple layers of security controlsTraining underscored role of cryptography in protecting data confidentiality, integrity, and authenticity in various security scenariosCompleted specialized training on Secure Shell (SSH) protocol using PuTTY, ensuring secure remote system access and management