• Tools expertise include SIEM, Vulnerability Assessment tools, IDS/IPS, Firewalls , File Integrity Monitoring (FIM), Network Access Control (NAC), Network Automation (NA) .• Create and tune the SIEM Rules to Improve The SIEM detection Capability.• Use frameworks (such as MITRE ATT&CK) to guide hypothesis-driven hunts and turn these into automated processes for future hunts.• Incident response investigations, containment, and root cause analysis activities and security posture improvement recommendations across multiple platforms.• Excellent knowledge of threat intelligence by monitoring and review of threat advisories utilizing tools such as MISP, HIVE, STIX.

• Email security, Data security and Web security proxy administration.• Penetration testing of banking infrastructure.• Compliance assessments preparations/validations including PCI-DSS, swift and core banking.• Access Rights and Identity Management, by ensuring compliance of the current Bank’s systems with their defined access rights.