Ahmad waheed mohammad Shrateh

• Serve as a trusted cybersecurity advisor for enterprise and government customers,
understanding business objectives and translating them into effective cybersecurity strategies.
• Lead customer-facing engagements from initial discovery and requirements gathering through
solution design, implementation planning, and customer success.
• Partner with Sales and Account Managers during presales activities, delivering technical
presentations, solution demonstrations, architecture workshops, and executive briefings.
• Design tailored cybersecurity solutions based on customer business, technical, operational, and
regulatory requirements.
• Prepare technical proposals, Statements of Work (SOW), High-Level Designs (HLD), Low-Level
Designs (LLD), Bills of Materials (BOM), and RFP/RFQ responses.
• Conduct cybersecurity maturity assessments, gap analyses, and roadmap development aligned
with NCA ECC, SAMA, ISO 27001, and industry best practices.
• Act as the primary technical advisor throughout the customer lifecycle, ensuring successful
solution adoption, customer satisfaction, and long-term strategic value.
• Facilitate technical workshops with customer stakeholders to define security requirements,
operational models, and implementation plans.
• Collaborate with engineering, SOC, and delivery teams to ensure proposed solutions are
successfully implemented and meet customer expectations.
• Evaluate emerging cybersecurity technologies and recommend best-fit solutions based on
customer environments and business objectives.
• Build strong relationships with customer technical teams, executives, and technology partners
while providing ongoing strategic cybersecurity guidance.
• Support post-sales engagements through solution optimization, health checks, architecture
reviews, and continuous improvement initiatives.

• Provide cybersecurity consulting services and lead solution architecture, design,
implementation, deployment, testing, and transition-to-operations activities across enterprise
security programs and regulatory requirements
• Lead end-to-end SOC operations within an MSSP environment, delivering 24x7 security
monitoring, threat detection, incident response, and managed security services.
• Architect, deploy, and manage enterprise security monitoring platforms including Elastic,
Splunk, FortiSIEM, ThreatDefence SecOps platform across cloud and on-premises environments.
• Lead SOC service delivery activities, including alert triage, incident investigation, escalation
management, SLA compliance, customer reporting, and service improvement initiatives.
• Manage and mentor multi-tier SOC teams (L1, L2, and L3), establishing operational processes,
escalation procedures, playbooks, KPIs, and performance standards.
• Design and implement Zero Trust and defense-in-depth security architectures to strengthen
enterprise security posture and reduce organizational risk.
• Lead incident response and digital forensics activities, including containment, eradication,
recovery, root cause analysis, and post-incident reviews.
• Drive SOC onboarding and customer integration projects, including log source onboarding, use
case development, correlation tuning, threat detection enhancement, and customer acceptance
activities.
• Support pre-sales engagements, RFPs, RFIs, and tender submissions by developing security
architectures, technical proposals, compliance mappings, solution diagrams, and supporting
documentation.
• Manage vendor relationships, technology evaluations, and solution selection processes to
ensure alignment with customer business, operational, and regulatory requirements.
• Ensure security operations and service delivery align with NCA ECC, SAMA Cybersecurity
Framework, ISO 27001, and customer-specific compliance requirements.
• Lead continuous improvement initiatives leveraging automation, threat intelligence, and AI/ML
driven analytics to improve detection accuracy, reduce false positives, and enhance SOC
efficiency.
• Design and implement cybersecurity architectures supporting secure connectivity,
segmentation, and integration between enterprise and operational environments.
• Deliver OT cybersecurity engineering and deployment activities, including implementation of
FortiSIEM, RADIUS, WSUS, OpManager, and Acronis solutions across industrial environments.
• Participate in ICT/OT cybersecurity projects, including architecture design, implementation,
Factory Acceptance Testing (FAT), and Site Acceptance Testing (SAT), supporting secure
deployments across energy, manufacturing, and critical infrastructure sectors.

• Designed, implemented, and maintained cybersecurity controls across on-premises and cloud
environments to ensure system integrity and data protection.
• Deployed, configured, and managed SIEM, SOAR, and EDR solutions, enhancing security
monitoring, automation, and incident response capabilities.
• Designed and implemented SOC monitoring setups, including log collection, correlation rules,
alerting mechanisms, and dashboard development.
• Supported SOC operations, including security event monitoring, threat detection, incident
investigation, escalation, and response activities.
• Conducted vulnerability assessments and risk analysis, identifying and mitigating critical security
gaps.
• Supported incident response and digital forensics activities, including log correlation, malware
analysis, and post-incident reviews.
• Monitored, investigated, and responded to security alerts, performing triage, root cause
analysis, and event correlation to prevent and contain threats.
• Developed and maintained security policies, hardening baselines, and access control
mechanisms aligned with ISO 27001 standards.
• Integrated diverse log sources and threat intelligence feeds into monitoring platforms to
enhance SOC visibility and threat detection capabilities.

• Managed and upgraded the organizational website, aligning design and functionality with brand
strategy.
• Continue to plan and implement website monitoring and maintenance processes to ensure
security, uptime, and performance.