Manama, Capital Governorate, Bahrain
Cybersecurity professional with 20 years of comprehensive experience, including 16 years spearheading Cyber Defense Centers and specializing in Digital Forensics and Incident Response (DFIR). I consistently demonstrate strategic leadership in cybersecurity, operational excellence, and technical innovation, notably in high-stakes telecom and financial environments. I hold industry-leading certifications such as CISSP, CISM, GPEN, GREM, GCDA, GRID, Splunk Certified Architect, AWS Security Specialty, and Kubernetes Security (CKS). My expertise spans critical cybersecurity disciplines, including SOC operations, malware analysis, threat intelligence, and advanced security architecture. Currently serving as Head of Cyber Defense Engineering at BeyonCyber, I lead strategic cybersecurity initiatives, managing comprehensive incident response operations and driving innovation through new cyber defense services. Career highlights include successfully managing complex security incidents, orchestrating effective integration of cutting-edge security solutions like SIEM, EDR, and NDR, and establishing robust threat intelligence and operational frameworks. I am recognized for building and mentoring high-performing teams, efficiently communicating cybersecurity risks and strategies to senior executives, and consistently achieving significant operational and revenue growth objectives.
- Cyber Defense center capability development - Threat Detection Engineering - Lead and handle Incident Response Activities
• Lead Incident Response (SIRT) activities for Critical Security Incidents • Lead and organize efforts related to all SOC Capability development • Define, Prioritize and Develop SIEM Use cases according to customer environment and relevance • Play as Subject Matter expert for SOC related technical requirements • Implement Security Capabilities like SIEM, FIM, EDR, DNS Security, Proxy Skills: Security Monitoring, SIEM, Threat Intelligence, Threat Hunting, Security Operation Center(SOC), End point threat Detection and Response, , WAF. EDR, Cisco AMP, Cisco Umbrella, File Integrity Management RFPs, SIEM, LogRhythm, QRadar
Security Architecture and Engineering - Involved in security solution architecture to work with MSSP Environment for Information Security offerings which involves in designing, developing and delivering solutions in a phased approach with necessary documentations addressed to multiple client requirements. Security Operations Center ( SOC) - Incident detection, Threat Intelligence Integration, Provide Input for APT Detection and Investigation, Security tools Integration for Dashboard, Event analysis and investigation, SOC Workflow implementation. Information Security Consultant - Requirement Gathering, Requirement to technology mapping, Security Solution implementation, documentation . PCI DSS Regulatory requirements fulfilling with controls, facing QSA for control implementation clarifications and reports. Includes products like - SIEM (ArcSight), File Integrity Management ( Tripwire Enterprise, NNT ) , Vulnerability Scanners ( Qualys Guard VM, Nessus) , Policy Compliance Tools ( Qualys Guard, Tripwire, Nessus, Custom Scripts). Content Developer - Develop custom contents for Security Products include ArcSight(Rules/Queries/Reports/Trends), Tripwire(Custom Compliance Management Scripts), Qualysguard( User Defined Control). Vulnerability Assessment / Penetration Testing - Performed Vulnerability Assessment(Qualys/Nessus) and Manual Penetration Testing ( Rapid7 Metasploit) as ad-hoc assignments. Trained on Digital forensics tools and methodologies