Alemtsadik Tadesse Habamo

• Responsible for managing and maintaining the safety and security of the Bank's systems and network to prevent unauthorized access and avoid data breaches • Designs and implements secure network solutions to defend against hackers, cyber-attacks, and other persistent threats. • Plan, organize, direct and control the activities of the Team; • Develop a comprehensive IT security Policy, manual, guidelines, standards, review it and ensure its proper implementation; • Ensure alignment of IT Security Strategies to Business Strategy • Prepare annual work plan and budget requirement; • Implement the annual plan of the Team, including any special tasks or projects requested by top management. • Serve as point of contact for all security related matters and liaise with the law enforcement bodies with respect to security issues; • Provide security related guidance and ensure cyber security awareness to end users

• Analyzes audit logs and security alerts to identify the root cause of the incidents • Monitor, detect and analysis of security incidents through SIEM (FortiSIEM) • Investigates suspicious activities, open incident investigation tickets and escalate • Implement network and security infrastructure project • Prioritizes security alerts and audit logs based on their criticality for further analysis • Designs, configures, implements and troubleshoots Firewall, IPS/IDS, VPN such as Site-to-Site VPN, DMVPN and Remote Access VPN • Design, implement, configure and troubleshoot IP address, VLANs, SVIs, HSRP, VRRP, GLBP, Dot1q Trunks and Access Ports, ACL, DHCP, DNS, NAT and more • Design, implement, configure and troubleshoot Routing Protocols(RIP, EIGRP, OSPF, BGP) • Carries out in-depth threat intelligence analysis to find the perpetrator, the type of attack, and the data or systems impacted • Conducts vulnerability assessment, follows-up and provide assistance during remediation • Provide cyber security awareness training to end users • Detect and respond to security breaches • Develop IS policy and procedure • Configure, implement, administer and troubleshoot LTM(load balancer), and ASM(WAF) • Configure and administer DNS Layer Security (Cisco umbrella)

• Configure and administer Active Directory • Design, configure and implement LAN such as VLAN, Trunk, Access Port, STP and more • Design, configure and implement WAN such as GRE, DMVPN, MPLS and more • Formulate and implement ICT policy and procedure • Design, implement, configure and troubleshoot IP address, VLANs, SVIs, HSRP, VRRP, GLBP, Dot1q Trunks and Access Ports, ACL, DHCP, DNS, NAT and more • Design, implement, configure and troubleshoot Routing Protocols(RIP,OSPF, EIGRP, BGP) • Design, configure and implementation Microsoft Key Management Systems (KMS), Active Directory, GPO and CA