Mohammed Al Dossary

Strategic and hands-on Senior Information Security Engineer with extensive experience securing complex, high-stakes environments across University and Hospital infrastructures. Expert in designing and maintaining resilient security architectures that protect sensitive employee, student, patient data and critical university and healthcare systems. I specialize in the end-to-end management of the security stack from initial investigation and incident response to the deployment of enterprise-grade solutions. I am driven by the mission to provide maximum high-level security enhancement through proactive architecture and rigorous identity management. Major Duties and Responsibilities: Enterprise Security Architecture: Design, implement, and optimize a full-spectrum security stack, including Firewalls , IPS, WAF, NAC and NDR ensuring seamless protection across diverse network segments. Identity and Access Governance: Lead the administration and strategy for Privileged Access Management (PAM) and Identity and Access Management (IAM) to enforce Zero Trust principles across the university and hospital systems. Advanced Threat Detection: Manage and tune SIEM, XDR, NDR, and EDR platforms to provide real-time visibility, enhancing information security across the environment. Incident Investigation and Response: Act as the technical lead for security investigations, moving from initial alert triage to full remediation and post-mortem analysis. Vulnerability Management And Offensive Security (VA/PT): Lead comprehensive Vulnerability Assessments and Penetration Testing cycles to proactively identify and remediate security gaps. Data Protection and Intelligence: Oversee Data Loss Prevention (DLP) programs and integrate Cyber Threat Intelligence (CTI) to proactively defend against evolving ransomware and phishing threats. Compliance and Data Protection: Aligning technical controls with global security standards and regulatory mandates to mitigate risk and ensure CIA.

Acting as Manager for Cybersecurity Operations And Compliance: I drove the optimization of cybersecurity operations, consistently enforcing internal policies, external compliance regulations, and audit controls to achieve enhanced regulatory compliance maturity. Conducted Comprehensive Risk Assessments And Management: to identify security gaps, analyze potential threats, and evaluate their impact on information systems, enabling proactive mitigation strategies. Cybersecurity Defense Enhancement in Security Infrastructure: Strategically hardened cybersecurity infrastructure, proactively mitigating cyberthreats and reducing security incidents, resulting in significantly enhanced critical system resilience through robust configuration management. Cybersecurity Tooling And Analysis Handling: Proactively manages and maintains critical cybersecurity security tools (IAM, SIEM, EDR, IPS. PAM, DLP, WAF) for optimal performance, while conducting advanced log analysis across diverse security infrastructure to identify and triage threats, minimizing false positives. Security Incident And Trend Reporting: Generates comprehensive reports on security incidents and emerging trends, providing actionable insights for leadership to refine security strategies and ensure regulatory compliance. Led and performed vulnerability assessment and penetration testing initiatives: to proactively identify security gaps and implement robust protective measures, boosting overall cybersecurity resilience. Continuous Cybersecurity Improvement : Drives ongoing enhancement of SOC processes and incident response through lessons learned, and proactively executes vulnerability scans with IT collaboration for timely remediation. Department Support Expertise: Adept at implementing efficient project methodologies and providing comprehensive support for activities, ensuring adherence to standards and regulations.

Incident Response Management: a great knowledge of managing and coordinating responses to security incidents, ensuring timely resolution and minimal disruption to SOC operations. Threat Analysis and Mitigation: Proficient in analyzing threats and vulnerabilities, implementing effective mitigation strategies to protect organizational assets. Security Information and Event Management (SIEM): Skilled in configuring and managing SIEM tools for real-time monitoring, threat detection, and incident response. Penetration Testing and Vulnerability Assessment: Experienced in conducting comprehensive penetration testsand vulnerability assessments to identify and exploit weaknesses in systems and applications.Cyber Threat Intelligence (CTI): Ability to gather, analyze, and apply threat intelligence to enhance security postureand inform incident response strategies. Data Loss Prevention (DLP): Knowledgeable in implementing data loss prevention strategies to safeguard sensitive information from unauthorized access and breaches. Security Awareness Training: Skilled in developing and delivering security awareness programs, including phishing simulations to educate employees on cyber threats. Risk Assessment and Management: Proficient in performing risk assessments to identify vulnerabilities, analyze potential threats, and evaluate impacts on information systems. Digital Forensics: Expertise in digital forensics techniques for investigating security incidents, collecting evidence, and conducting post-incident analysis. Department Support Expertise: Adept at implementing efficient project methodologies and providing comprehensive support for auditing activities, ensuring adherence to standards and regulations. Collaboration and Communication: Strong interpersonal skills for effective collaboration with IT teams and cross-functional departments during incident response and security initiatives with efficient SLA agreements .

As a skilled Cybersecurity and Digital Forensics professional, I adeptly respond to security threats, protecting valuable information from unauthorized access and inadvertent damage. I am committed to implementing effective controls and procedures to protect digital assets without compromising usability and performance. I thrive in competitive work environments that enhance my skills and fulfill my passion for gaining new experiences.