Security & compliance automation

− Fractional CISO for FinTechs and technology companies− Security strategy architecture & design− Compliance and standards− Cyber posture assessment− DevSecOps− Governence, Risk, and Compliance

Team lead for the red team and penetration testing teamRed Team assessmentsApplication Threat ModellingInfrastructure, Web, and Wireless penetration testing

Web applications security assessment and bug bounty programs for leading companies and startupsKey Skills:- Ethical Hacking- Web Application Security- Vulnerability Assessment

- Infrastructure & network penetration testing- Web application penetration testing- Red team testing- Application security risk assessment- Vulnerability assessment- Cyber war games / incident simulations - Cyber program management- Third party risk assessments

Provide advisory services to help clients improve the information risk and security management function to better respond to cyber security threats and incidents.Lead and participate in specific information risk and security advisory projects such as: Penetration Testing, Vulnerability Assessment, Security Architecture Review, Security Solution design, and the implementation of international security standards like ISO 27001, PCI-DSS, and ISO 22301.Delivers technical and non-technical information risk and security training.

Duties:Coordinate penetration testing with external companies and implement recommendations based on test findings.Writing and disseminating information security policies and proceduresCoordinating a response to actual or suspected breaches in the confidentiality, integrity or availability of Bank data.Coordinating the work of different information security personnelEvaluating the security threats and risks posed by the daily work conducted by different IT units and proposing alternatives.Testing and updating the current business continuity plan and disaster recovery plan. Working with external contractors for penetration testing and vulnerability assessments for the Bank’s network, and implementing their recommendations with the IT department.Monitoring network security equipment and reports.Setting weekly, monthly, quarterly and yearly tasks and goals for the information security unit.

Duties:Coordinate with Amman stock exchange and perform vulnerability and software testing on e-trade application.Testing software for bugs and security related issues.

Duties:Deploying and troubleshooting web applications running on Weblogic and TomcatDeploying and troubleshooting applications running on MySQL, MSSQLSolving several and new serious issues that occurred in internal environments at work.Fixing, maintaining and improving machine performanceMaintaining network environment and workstationsDesign, implement and maintain two wireless networks for EtQEnsuring network is secure and assessing network’s vulnerabilityServers and workstations hardening and patchingSupport for EtQ’s in-house made software for clients throughout the worldResearching different problems which arise at clients’ and local environments

Part time translator and subtitler for documentaries, movies and different shows as requested. Arabic-English and English-Arabic

Achievements:Upgraded company partnership status with Microsoft corp. to gold partner, enabling company access to valuable resources.Improved network security by Implementing WSUS server, Group Policies, Antivirus program, and ISA server.Created a network maintenance program for clients which generated a new revenue stream from the existing resources allocated for the networks department.Proposed and helped implement a Microsoft licensing program for clients which generated a new revenue stream for the company.