Abdallah M Balbaid

• Making the VA and PT Section Strategy for the next 3 years.
• Announcing about the Yearly plan for VA.
• Announcing about the yearly plan for PT and share it with the
concern department or sections.
• Writing the procedure of Vulnerability assessment and make
sure it aligns with NCA requirement.
• Writing the procedure of Penetration Test and make sure it
aligns with NCA requirement.
• Comparing the Key Performance Indicator (KPI) each Quarter.
• Writing and sharing the monthly report for the section with
the Higher Management.
• Scanning the network Devices (Routers, Switches, DMZ)
for VA thru Tenable (passive Scan)
• Scanning the Servers (Windows, Linux) for VA thru
Tenable (Active scan)
• Scanning the databases (Oracle, SQL) for VA thru Tenable.
• Swiping The assets of the environment using YARA rule
thru tenable
• Generate the Vulnerabilities Assessment report
• Monitor the organizations networks for security breaches
and investigate a violation when one occurs
• Prepare reports that document security breaches and the
extent of the damage caused by the breaches
• Conduct penetration testing, which is when analysts
simulate attacks to look for vulnerabilities in their systems
before they can be exploited
• Research the latest information technology (IT) security
trends
• Help plan and carry out an organizations way of handling
security
• Develop security standards and best practices for their
organization
• Recommend security enhancements to management or
senior IT staff
• Help computer users when they need to install or learn
about new security products and procedures
• Monitoring security access
• Performing both internal and external security audit
• Verifying the security of third-party vendors and
collaborating with them to meet security requirements
• Design new security systems or upgrade existing ones
• Monitor and respond to phishing emails and pharming
activity