Riyadh, Saudi Arabia
Experienced Cybersecurity Threat Management and Regulatory Compliance Professional with 10+ years of experience in cybersecurity architecture, governance, risk and compliance (GRC), regulatory affairs, enterprise security operations, and threat management. Strong expertise in Zero Trust Security Models, Enterprise Security Design, Financial/Banking security environments, and implementing security controls aligned with NCA ECC, SAMA, CST/CITC, ISO 27001, NIST CSF, GDPR, COBIT, Aramco CCC/CCC+, SDAIA and SABIC standards. Hands-on experience in penetration testing, vulnerability assessments, SIEM, EDR/XDR, incident response, audit readiness, regulatory reporting, compliance oversight, and risk management, with proven success in strengthening enterprise security posture and supporting regulatory inspections. Skilled in government and regulatory liaison support, policy monitoring, licensing governance, and translating compliance requirements into operational controls. Strong background in network and infrastructure security, including firewall management (Fortinet, Cisco ASA, Sophos, MikroTik, OPNsense, pfSense), VPN security, segmentation (VLAN, HSRP, VRRP), and enterprise security architecture. Experienced in OT/ICS security, ISA/IEC 62443, and critical infrastructure risk assessments. Additionally experienced in cloud and systems security including Azure, AWS, Microsoft 365, Azure AD, Intune, virtualization (VMware ESXi, Proxmox), and security automation using Python and Bash, delivering secure, scalable, and resilient enterprise environments while supporting national cybersecurity and compliance objectives.
Penetration Testing & Vulnerability Analysis Tools: Burp Suite, Nmap, SQL Injection, Zenmap, ZAP, Nikto, Wireshark, Nessus, Action1 Audit ISMS and Compliance ISO27001 Tools: OSSEEC, SIEM (Incident Management, FIM, MITRE Attack, VAPT), OpenVAS, WebMap, IPS/IDS IT Security Operations, Endpoint & Network Security, Cloud & Container Security, Identity & Access Management (IAM/PAM/MFA), SIEM Monitoring, Incident Response, Vulnerability Assessment & Penetration Testing, Data Protection (DLP, Encryption), Firewall & VPN Configuration, IDS/IPS, Azure AD, SAML, ADFS, SSO, MDM Security OT/ICS ISA/IEC 62443 Tools: Nozomi Networks Guardian, OpenVAS, Kiwi Sys logs, NetOps, SQuert, SGUIL, EnCase, FTK, Grass Martin, NESSUS, Nmap (OT Profiling), IACS Security & Patch Management, ICS Cybersecurity, OT & SCADA Security, OT Risk Assessment & Threat Modeling, Vulnerability Assessment (ICS), Incident Response (OT) ISO 27001, CCC+, SABIC Documentation Skills: Annex Controls, ISO 27001 Standards, Understanding and Mapping, Gap Analysis, Implementation Planning, Documentation and Records Firewall Configuration Platforms: OPNSense, Fortinet, Pfsense, CISCO ASA, Mikrotik Capabilities: IPSec Tunneling, IPS, Failover to LB, NAT Policies, DHCP, VOIP, VPN, SSL VPN, SMTP, IP-Pool, Bridging Network Segmentation Technologies: VLAN, HSRP, VRRP, Trunking Server Administration & Automation Systems: MS365, Windows Server 2016, Hyper-V, DNS, FTP, AD DC, Group Policies, Azure AD, Entra ID, MS Intune, Linux Administration (Automation & LDAP, NGNIX) Skills: Scripting (Python, Bash) Virtualization & Clustering Management Platforms: Esxi, Proxmox Skills: Infrastructure Management, LDAP, Web Server Maintenance, SQL Maintenance Network Devices Configuration Capabilities: VPN Setup, Mikrotik Configuration, Telecommunications Collaboration, VICI dialer, FreePBX, SIP Servers Cloud Deployment & Management Platforms: Azure, AWS, Cloudflare, HostGator DevOps Tools Proficiency: Nagios, Docker, Git, Ansible, Grafana
Experienced IT & Network Administrator adept in configuring intricate network infrastructures. Proficient in SonicWall, Sophos XG firewalls, SSL/L2TP VPN setup, Windows Server 2016, Hyper-V, VMWare, AWS, and Azure. Skilled in NAS deployment, 24/7 host operations, and innovative AWS-based proxy servers. Versatile in handling biometric devices, printers, CCTV, and remote setups (RDP) amid the COVID-19 era. Excels in network design, software installation, server maintenance, and driving impactful network enhancements.
Penetration Testing | Vulnerability Analysis (Burp Suit | nmap | SQL Injection | Zenmap | ZAP | Nikto |Wireshark | Nessus,) Audit ISMS and Compliance ISO-27001 (OSSEEC | WAZUH | OpenVAS (Open Vulnerability Assessment System) ) ISO 27001 Documentation (Annex Controls | ISO 27001 Standards | Understanding and Mapping | Gap Analysis | Implementation Planning | Documentation and Records | Compliance Maintenance | Testing and Validation | Continuous Improvement) Firewall Configuration (Fortinet , Pfsense, CISCO ASA , Mikrotik) IPSec Tunneling | IPS | Failover to LB | NAT policies | DHCP | VOIP | VPN | SSL VPN | SMTP | IP-Pool | Bridging ) Network Segmentation (VLAN | HSRP | VRRP | Trunking) Server Administration & Automation (Windows Server | Linux Administration | Scripting (Python, Bash)) Virtualization & Clustring Management ( Esxi | Proxmox | Infrastructure Management | LDAP | Web Server Maintenance | SQL Maintenance | Network Devices Configuration ( VPN Setup | Mikrotik Configuration | Telecommunications Collaboration | VICIdialer | FreePBX | SIP Servers ) Cloud Deployment (Azure) | CloudFlare Management | HostGator Management DevOps Tools (Nagios, Docker, Git, Ansible, Grafana)
Firewall (Sonic Wall) PTP | IPS | Failover to LB | NAT policies | DHCP | VOIP | L2TP | VPN | SSL VPN | SMTP Server Handling 2016 and Hyper-V (DNS | FTP | AD DC | Group Policies) VM ware (ESXi, V-Center, V-Sphere, and Hosts) Deploying NAS solution Cloud Computing (AWS | Azure) Running live hosts 24/7 Creating Proxy Server in AWS and Uing PFsense from traffic deversiation USA offfice servers handling Microsoft SMTP and 365 Proxy Server and services handling CCTV DVR | NVR Handling Biometric mechines | Printers | Gate lock Biometric Network COVID 19 Work at home handling RDP's Design and deploy functional networks (LAN, WLAN, WAN) Configure and install software, servers, routers and other network devices Monitor network performance and integrity Maintain complete technical documentation Suggest improvements to network performance, capacity and scalability