• Project Leadership: Led the development and implementation of Dynamics 365 ERP, LMS, andDashboard systems, incorporating application security best practices and ensuring risk mitigationthroughout project phases.• Network Security: Managed Palo Alto, Fortinet, and F5 firewalls, performing regular threat modelingand implementing security controls to prevent cyber threats. Conducted risk assessments to ensurecompliance with NIST and SANS standards.• Cloud Management: Directed the establishment of a Google Cloud environment on GCP Qatar to hostcurrent and future projects, applying secure deployment patterns and continuous monitoring tomitigate risks.• Azure Cloud Services: Administered Azure cloud infrastructure, implementing best practices forsecurity and scalability, and performing continuous risk assessments to protect data and applications.• Vendor Collaboration: Worked with vendors to integrate advanced IT solutions, ensuring they metsecurity standards and regulatory compliance, and managed risk assessments for all implementations.• Governance and Compliance: Developed IT policies in collaboration with PwC, enhancing governanceframeworks and ensuring adherence to ISO 27001 and GDPR standards. Conducted regular audits tomaintain compliance.• Staff Training and Documentation: Educated staff on secure IT practices and maintainedcomprehensive documentation of IT processes, fostering a culture of security awareness and ensuringoperational efficiency.

• Client Needs Assessment and Strategy Development: Collaborated directly with clients to assess their cybersecurity needs using NIST Cybersecurity Framework. Developed tailored strategies to enhance network security, focusing on risk management and compliance with industry standards.• Risk Assessments and Vulnerability Management: Conducted comprehensive risk assessments using OWASP Testing Guide and OWASP ASVS frameworks. Identified vulnerabilities in network infrastructure and application security, providing targeted mitigation measures to address identified gaps.• Incident Response Planning and Execution: Developed and implemented incident response plans in line with NIST SP 800-61 guidelines. Conducted regular incident response drills to ensure preparedness and effective handling of security breaches.• Application Security Reviews: Performed secure design reviews and manual code reviews for client applications, identifying and mitigating potential security vulnerabilities. Ensured applications adhered to OWASP Top 10 and best practices for secure coding.• Threat Modeling and Security Architecture: Conducted threat modeling exercises using STRIDE and DREAD methodologies to anticipate potential threats and design appropriate security controls.Provided security architecture guidance for new and existing projects.• Cloud Security Advisory: Provided advisory services on secure deployment patterns for Azure cloud services. Conducted regular security audits and assessments to ensure continuous compliance with best practices and evolving security standards.• Governance and Policy Development: Assisted clients in developing and maintaining cybersecurity policies and procedures in accordance with ISO 27001 and GDPR. Conducted regular audits to ensure compliance and update policies as needed.

• Issue Diagnosis and Resolution: Diagnosed and resolved hardware/software issues using diagnostic toolsand remote desktop software.• Patch Management: Managed automated software updates, ensuring system security and compliancewith OWASP standards.• Network Monitoring: Configured and monitored networks using Wireshark and Fiddler, addressinganomalies and enhancing security protocols.• Security Protocols: Implemented and managed firewalls (Palo Alto, Fortinet) and antivirus solutions,monitored security logs, and conducted audits to comply with NIST and SANS standards.

• Preventative Maintenance and Repairs: Conducted preventative maintenance and repairs on FortiGate Firewalls, STC Internet Routers, and Cisco Catalyst Switches, significantly reducingintrusion incidents.• Firewall Policy Implementation: Developed and enforced firewall policies, including IPS, AV, andWeb Filtering configurations, aligned with company security requirements.• VPN Configuration for Remote Access: Established secure VPN configurations, ensuring robust encryption and authentication protocols for remote employee access.• Network Troubleshooting and Risk Management: Diagnosed and resolved TCP/IP network issues, conducted risk assessments, and implemented measures to enhance security and ensure compliance with industry standards.

Network Engineer Tasks:-Installing well-functioning computer networks, connections and cabling.-Configured routers, switches, firewalls, and different types of hardware, to deploy and manage LAN, WAN and wireless networks.-Evaluated network performance to optimize traffic flow, maintain security and improve processes.-Performed tests and troubleshooting on newly installed hardware and software to provide components that interface correctly with each other and network.Electrical Engineer Tasks:-Implementing of an electrical Plan, managing the generation, transmission, and distribution of power and resolve electrical issues.-Overseeing technicians and craftsmen, budgeting, estimation, and purchase of electrical components.

Hackathon Organizer:-Mentor in the Mentoring Program-Creating/maintaining a website-Planning meetings and activities