Tewodros Mengesha

Secure System Consultancy: Provide expert consultancy services focused on the design, development, engineering, and operational aspects of secure systems. Collaborate with cross-functional teams to ensure that security is integrated into every phase of system development and deployment. 2. Cyber security Education and Awareness Training Develop, plan, and implement comprehensive cyber security education and awareness training programs tailored for both IT and non-IT staff. 3. Risk Communication Effectively communicate cybersecurity risks to stakeholders and business partners through clear reporting and presentations 4. Policy Development and Revision Provide strategic input for revising the company’s information security policies, standards, processes, and procedures 5. Cross-Functional Cybersecurity Team Establishment Establish a collaborative cross-functional team comprising cybersecurity engineers, architects, analysts, and other relevant personnel. 6. Security Audits Conduct periodic audits to identify security violations and inefficiencies within existing systems. 7. Security Controls Implementation Implement and maintain robust security controls across all organizational systems to protect against unauthorized access or data breaches. Regularly review control effectiveness to adapt to evolving threats. 8. Problem Identification and Resolution Proactively identify potential security problems as well as actual incidents through continuous monitoring and analysis of system performance 9. Current Situation Assessment Conduct thorough assessments of the current cybersecurity landscape, evaluating existing security measures and identifying vulnerabilities 10. Advanced Metering Infrastructure (AMI) Management Oversee the management of AMI systems to enhance energy distribution efficiency. Ensure that AMI solutions are secure, reliable, and capable of providing real-time data on energy consumption patterns.

1. Prepared BCDR Strategy Plan: Developed a comprehensive Business Continuity and disaster Recovery strategy that aligns with organizational goals, ensuring minimal disruption during incidents. This includes the establishment of recovery time objectives (RTOs) and recovery point objectives (RPOs) during the DR activation process from disaster Recover datacenter. 2. Conducting Risk Analysis: Led risk analysis initiatives to identify potential threats to business operations. Utilized qualitative and quantitative methods to assess the likelihood and impact of various risks, facilitating informed decision-making. 3. Conducting Business Impact Analysis (BIA): Executed BIAs across departments to evaluate critical business functions and their dependencies. Analyzed the effects of disruptions on operations, enabling prioritization of recovery efforts. 4. Collaborated with IT teams to ensure alignment between technology recovery plans and overall BCDR strategies. 5. Conducted regular training sessions for staff on BCDR protocols, enhancing organizational awareness and readiness. Core Competencies  Business Continuity Planning  Disaster Recovery Strategy Development  Risk Assessment & Management  Business Impact Analysis (BIA)  Crisis Management & Response Coordination  Compliance & Regulatory Standards  Training & Awareness Programs  Stakeholder Engagement

1. Secure System Consultancy: Provide expert consultancy services focused on the design, development, engineering, and operational aspects of secure systems. Collaborate with cross-functional teams to ensure that security is integrated into every phase of system development and deployment. 2. Cyber security Education and Awareness Training Develop, plan, and implement comprehensive cyber security education and awareness training programs tailored for both IT and non-IT staff. 3. Risk Communication Effectively communicate cybersecurity risks to stakeholders and business partners through clear reporting and presentations 4. Policy Development and Revision Provide strategic input for revising the company’s information security policies, standards, processes, and procedures 5. Cross-Functional Cybersecurity Team Establishment Establish a collaborative cross-functional team comprising cybersecurity engineers, architects, analysts, and other relevant personnel. 6. Security Audits Conduct periodic audits to identify security violations and inefficiencies within existing systems. 7. Security Controls Implementation Implement and maintain robust security controls across all organizational systems to protect against unauthorized access or data breaches. Regularly review control effectiveness to adapt to evolving threats. 8. Problem Identification and Resolution Proactively identify potential security problems as well as actual incidents through continuous monitoring and analysis of system performance 9. Current Situation Assessment Conduct thorough assessments of the current cybersecurity landscape, evaluating existing security measures and identifying vulnerabilities 10. Advanced Metering Infrastructure (AMI) Management Oversee the management of AMI systems to enhance energy distribution efficiency. Ensure that AMI solutions are secure, reliable, and capable of providing real-time data on energy consumption patterns.

1. Perform and Develop Procedures for System Security Audits, Network Penetration Tests, and Vulnerability Assessments Conducting thorough security audits across various systems including operating systems (OS), servers, databases, and applications. . The process typically includes: Conducting Penetration Tests: Using methodologies such as OWASP Top Ten or NIST SP 800-115. Vulnerability Assessments: Utilizing tools such as, Nessus and Qualys to scan for known vulnerabilities in systems and applications. 2. Assess Threats, Risks, and Vulnerabilities from Emerging Security Issues Risk Assessment: Evaluating the likelihood and impact of identified risks on business operations. 3. Develop and Interpret IT Security Policies Policy Development: comprehensive security policies that align with industry standards (ISO/IEC 27001) and regulatory requirements Training & Awareness Programs: Ensuring that all employees understand these policies through training sessions. 4. Conduct IT Audit Assessments Ensure compliance with established policies and identify areas for improvement: -Reporting Findings: Documenting audit results clearly and concisely while providing actionable recommendations for mitigating identified risks. 5. Maintain a Schedule of Vulnerability Scanning 6. Collaborate with Infrastructure Team Incident Analysis: Working alongside infrastructure teams to analyze events that may indicate a breach. Traffic Monitoring Tools Usage: Utilizing tools such as, CA Spectrum and Wireshark to monitor network traffic patterns for anomalies indicative of security breaches. 7. Deploy and Manage McAfee web gateway security solution to filter and monitor all incoming and outgoing web traffic. 8. Deploy and Manage Next-generation firewall (NGFW) for granular and comprehensive network security 9. Investigating ArcSight SIEM events to determine any true intrusions. -10. Install and manage TrendMicro DSM & Apex One end point security for servers and end machines.

ERP Project Implementation Follow-Up: Actively monitor the progress of ERP project implementations by verifying specifications and functionalities of various network devices including routing and switching equipment, contact center technologies, and security apparatus. Data Center Operations: Oversee the implementation of Data Centers (DC), Disaster Recovery (DR) sites, and Regional Office data centers while ensuring optimal LAN installation practices. District Office Network Deployment: Lead initiatives for deploying networks across district offices by assessing current capabilities and designing solutions that enhance connectivity and performance. Ensure compliance with organizational policies while implementing best practices in network design. User Acceptance Testing (UAT): Prepare comprehensive User Acceptance Testing plans for the ERP project’s network infrastructure implementation. Facilitate testing sessions with stakeholders to validate functionality against business requirements. Network Infrastructure Configuration Review: Provide detailed feedback on both physical and logical configurations of the ERP project’s network infrastructure. Engage in discussions with technical teams to address any discrepancies or improvements needed in the setup. BGP Configuration Management: Configure Border Gateway Protocol (BGP) peers along with internal routes using both dynamic protocols and static routing methods across all regional and district offices. Security Tools Management: Manage and maintain a suite of security tools including CA Technologies, eSight, ArcSight, PIEM (Previlage Information Event Management), and Identity Access Management (IAM). Regularly update security protocols to safeguard organizational assets against potential threats. Training Provisioning: Develop training programs focused on Network and Security business frameworks such as ITIL (Information Technology Infrastructure Library) and SIEM (Security Information Event Management).

• Preparing bid for NDC optimization project • Working with the contractor and NDC team for NDC optimization project in all aspects, check device specification, functionality, design and implementation as well as UAT preparation. • Participate in government office Data center implementation project bid preparation and implementation. • Working as consultant and bid issues of Network implementation project for minster bureau and regional offices. • Replace with main activities and responsibilities administering & designing LANs, WANs internet/intranet, and voice networks. Analyzing & developing key components using methodology prescribed techniques. Communicating and negotiating with users, specialists, other staff and suppliers. Network connectivity troubleshooting, ping, tracert, telnet. Responsible for communication protocols, configuration, integration & security. Investigating, diagnosing and resolve all network problems. Maintaining pre-packaged software applications on the LAN. Upgrading and repairing faults on network systems, networks & peripheral equipment. Cisco and other switch configuration in particular VLAN configuration/troubleshooting. Working with multiple technical platforms.

Relevant Coursework: 1. Embedded Systems: Studied the design and implementation of embedded systems including microcontrollers and real-time operating systems. Gained hands-on experience with hardware-software integration. 2. Wireless Communication: Explored principles of wireless communication technologies including protocols, network architectures, and signal processing techniques. 3. Cyber Security: Covered topics such as network security, cryptography, risk management, and ethical hacking practices to safeguard information systems. 4. Big Data: Analyzed big data technologies including Hadoop and Spark. Focused on data mining techniques and the application of machine learning algorithms to large datasets. 5. Human-Computer Interaction (HCI): 6. Project Management: Learned methodologies such as Agile and Waterfall for effective project planning, execution, monitoring, and closure.  Thesis Title: Amharic Language Sentiment Analysis Using Deep Machine Learning