Waleed Hamdan Email & Phone Number

Riyadh, Sa

Saudi Arabia

Riyadh, Saudi Arabia

Riyadh, Saudi Arabia

•Deliver Cybersecurity projects within enterprise level. •Security Device management, Health check, license and status monitoring.•Manage SOC solutions such as: SIEM and Threat intelligence platform.•Vulnerability Management • Compliance and Risk Management.•Manage Change Management cybersecurity Requests.•Incident response handler – handle day to day reported cyber incidents internally and externally with proper security gaudiness. •Prepare and conduct Cybersecurity Drills. •Comply with all relevant safety, quality and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.•Incident Response Management: - Updating CSIRT plan. - Establish and manage capability to respond and recover from disruptive and destructive Cyber systems incidents. - Develop incident handling recovery plans including organizing, training, and equipping teams. - Ensure periodic testing of the response scenarios and recovery plans where appropriate.

• Lead incidents Handling& Response Activities Coordinate and lead incident response efforts during cybersecurity incidents, working closely with team members to investigate and mitigate security breaches. Ensure timely and effective response to security incidents to minimize impact on the organization.• SIEM Administration Configuring log sources to ensure comprehensive coverage of the organization's IT environment. Normalizing and aggregating log data to ensure consistency and ease of analysis. Managing log retention policies to comply with regulatory requirements and organizational needs. Creating correlation rules to detect security incidents based on specific patterns or sequences of events. Setting up threshold rules to identify abnormal behavior or activity. Defining response rules to automate actions or alerts triggered by security events.• Perform deep investigation and incident respond.• Threat hunting.• Soc gaps assessment. • Develop and updated Soc policies and procedures.• Develop and update Playbook. • performed awareness session and address the Incident Respond to accountable team • Manage coop fresh graduate.

Riyadh

• Incident respond management. • Security monitoring and analysis.• Security incident Response. • Configuration Management.• NCA reports management.• Cybersecurity systems administration

Riyadh

Cyber security analyst STC Symantec project.

Riyadh

CYBER SECURITY ANALYST LEVEL 1,SAUDI ELECTRICITY COMPANY PROJECT BY SYMANTEC*Perform real-time SIEM monitoring, triage and response per defined incident handling processand procedures.* Determine incident impact by applying event analysis and correlation of multiple log sourcessuch as Windows, Unix, Firewalls, Routers, Switches, IPS, Antivirus and Flow Data using SIEMtechnology.* Perform pre-approved provisioning requests and troubleshooting per approved use cases.* Perform preliminary analysis of unclassified incidents. * Manage incident coordination and response. Also, provide accurate, complete and timelywritten documentation when required.* Support traditional SOC operational activities to maintain approved SLA's.* Manage User service calls, service desk requests and emails as per defined procedures.* Perform health monitoring, basic technical support/troubleshooting and handle emergencyescalations.* Escalate Endpoint emergency support calls to relevant SOC Analysts per process.* Provide accurate, complete and timely Shift handover reports. Technologies:* Symantec managed security services.* Symantec endpoint protection.* Advanced threat protection.

Master Of Science - Ms, Cyber Security, 3.50 Out Of 4

Bachelor Of Engineering (B.E.), Network Engineering And Communications