Moutaz A.

•Strategic Risk Management: Overseeing organisation-wide risk assessments and implementing the NIST/ISO frameworks to enhance security posture. •Governing AI Security: Developing frameworks and policies for the secure development and deployment of the company's AI/ML models, addressing risks such as data poisoning, model theft, and adversarial attacks. •Leading AI/ML Adoption: Directing the strategy and implementation of AI/ML-powered security tools (e.g., UEBA, SOAR, SIEM enhancements) to automate threat detection, reduce false positives, and expedite incident response. •Incident Response & Operations: Designing and managing incident response plans to ensure rapid containment and recovery in the event of a breach. •Security Architecture & Engineering: Steering the deployment of advanced security technologies (SIEM, XDR, Cloud Security) across infrastructure. •Governance & Compliance: Ensuring adherence to industry standards and data privacy regulations (e.g., GDPR, SOC 2). •Building a Security Culture: Promoting security awareness and training programmes across all departments to foster a security-first mindset.

Develop and lead the cyber threat intelligence strategy to protect all sensitive information and IT assets. Stay abreast of the latest cybersecurity threats and trends to ensure timely and relevant updates to the security measures. Manage the collection, analysis, and dissemination of threat intelligence. Work closely with internal stakeholders to provide actionable intelligence and security recommendations. Coordinate with external partners, including cybersecurity organizations and other financial entities, to enhance threat detection and response capabilities. Lead and mentor a team of cybersecurity professionals in the threat intelligence division. Prepare regular threat analysis reports and briefings for senior management to aid in quick and effective decision-making.

•Analyze network and host activity associated with both successful and unsuccessful intrusions by advanced attackers. •Perform network traffic analysis utilizing raw packet data, net flow, IDS, and custom sensor output. •Leverage understanding of tactics, techniques and procedures associated with advanced threats to create and add custom signatures that mitigate highly dynamic threats to the enterprise. •Employ advanced forensic tools and techniques for attack reconstruction and intelligence gathering. •Coordinate resources during enterprise incident response efforts, driving incidents to resolution. •Identify and evaluate new sources of intelligence, and integrate numerous types of cyber security data sources into cyber threat analysis products. •Proactively research emerging cyber threats. Apply analytical understanding of attacker methodologies and tactics, system vulnerabilities, and key indicators of attacks and exploits. •Produce threat intelligence reports and briefings, that provide situational awareness of cyber threats impacting the company's global network infrastructure, to every level of the organization. •Conduct threat hunt operations using known adversary tactics, techniques and procedures, as well as indicators of attack, in order to detect advanced threats to the enterprise. •Proactively drive hunting and analysis against the dataset available •Collaborate using information and knowledge sharing networks and professional relationships to achieve common goals. •Stay abreast of world-wide events that are indicators of developing trends for situational awareness. •Mentor less experienced team members. •Provide on-call support for incident response efforts outside of core hours as needed.

•Conduct the Gap Analysis for APT campaigns targeting organization in the Middle East like Diskwiper attacks (Shamoon wave 2-3, Greenbug, Magic Hound, Cobalt Gypsy, StroneDrill, and Use of compromised websites for hosting malicious documents) Ran Ran Ransomware, etc and prepared a set of recommendations to improve the security posture of SEC. •worked on multiple recently discovered vulnerabilities and provided my organization with recommendations to avoid the damage. •Revised and currently maintaining the procedures for Threat Handling, Incident Handling, and Digital Forensics. •Designed the reporting infrastructure and prepared templates for the reports. •Handled multiple high-profile incidents related to spear phishing, web application attacks, ransomware

•Efficiently developed and implemented Vulnerability Management Plans for corporate sites, and created company policies governing corporate security, mail and Internet usage, access control, and incident response Using Nexpose Rapid 7 & Nessus VA tools . •Headed risk assessment team charged with analyzing all critical systems, developing reports to document system vulnerabilities, and recommending appropriate solutions. •Lead Implementer for the Incident Response Management Implementation Team based on ITIL2000, ISO 27035 and 800-61 rev 2. •Prepare the Documentation for Forensics Analysis Investigation & Cyber Threat Intelligence (Policies- Processes – Procedures)

-Teaches EC-Council (CHFI & CEH) , Microsoft (MCITP) and CompTIA Security+ material's from approved curriculum and develops daily lesson plans to include instructional aids. -Maintains expertise in subject area and recommends improvements in Technical Training curriculum design. -Performs duties in the Learning Resource Center as assigned. Accomplishments: *Develop effective and engaging learning environments. *Enhance teaching and communication skills. *Earn a Certificate of Accomplishment in Teaching (CTT+). http://www.smt-center.com/

• Collaborated with executive team to define business requirements and systems goals. • Design Plan and Implement, Installation, Deployment configuration and Tuning Dell Enterprise and Symantec Products as well as recommended, best practices for better workflow • Delivered technical support, checked system performance reports for anomalies and implemented immediate remedial measure • Proposed technical feasibility solutions for new system designs and suggested options for performance improvement of technical components. • Performed cost-benefit and ROI analyses for proposed systems. • Designed tailored disaster recovery solutions to maintain uptime.