Ashraf Salah

• Information Security Supervision: Overseeing day-to-day security control implementations and
monitoring real-time operations to maintain a resilient security posture.
• SIEM & Detection: Hands-on expertise in IBM QRadar, Splunk, and Azure Sentinel for event
correlation and alert tuning.
• Infrastructure Monitoring: Proficiency in PRTG, SolarWinds Orion, and ManageEngine for
continuous health and security tracking.
• Incident Response (IR): Executing the full C.E.R lifecycle (Containment, Eradication, Recovery) and
performing initial triage to reduce false positives.
• Endpoint Security (EDR/XDR): Managing Elastic Endgame, CrowdStrike, and Microsoft
Defender, for proactive threat containment.
• Threat Analysis: Mapping adversary tactics using MITRE ATT&CK and Cyber Kill Chain frameworks
to investigate Phishing, Malware, and Ransomware.
• Vulnerability Management: Conducting automated assessments and remediation using Nessus,
Tenable.io
• Governance, Risk and Compliance GRC: Aligning daily operations with NCSA Qatar, ISO
27001, NIST, and GDPR frameworks through rigorous security control oversight.
• Technical Reporting: Documenting complex incidents and recommending SOC capability improvements
to management.

• Monitored, analyzed, and triaged security alerts using SIEM and EDR platforms to detect potential
cyber threats and reduce false positives.
• Conducted initial investigation of incidents by correlating logs, endpoint activity, and network traffic
patterns (SIEM, EDR, NDR).
• Performed static malware analysis, file integrity monitoring (FIM), and applied YARA rules for early
threat identification.
• Applied Cyber Kill Chain, MITRE ATT&CK, and Active Directory Attack Cycle frameworks to
classify and track adversary techniques.
• Investigated and categorized phishing emails and malicious attachments to prevent credential theft
and lateral movement.
• Executed adversary emulation and beacon detection using RITA and Wireshark to uncover
persistence and C2 communications.
• Assisted in incident response processes, including containment, eradication, and recovery, ensuring
minimal business impact.
• Configured security event logging, log forwarding, and correlation rules to enhance threat visibility
and response efficiency.
• Documented incidents, investigation steps, and response actions, providing detailed reports for
escalation to higher SOC tiers.
• Participated in continuous improvement of SOC playbooks, detection rules, and threat-hunting
procedures.

• Monitor, diagnose, and resolve complex issues related to network and computer systems.
• Manage and administer servers, networks, and applications, including DNS, FTP, and VPNs. Maintain
the internal network structure of a data center by managing routers and switches to ensure they are
operational.
• Install, configure, and maintain switches, routers, servers, firewalls, and hard drives.
• Troubleshoot network systems to identify and resolve performance issues.
• Provide solutions to complex problems involving the integration of various technologies.
• Design plans and lead initiatives for optimizing and restructuring network architecture. Maintain current
knowledge of network administration and firmware integration.
• Monitor the environmental conditions of the data center to ensure they are optimal for servers, routers, and
other devices.
• Perform repairs on data center systems and update software/operating systems.
• Calibrate and monitor data center servers to ensure efficient performance.
• Conduct inspections of power and cooling systems to ensure they are operational and efficient. Organize
the floor space that houses data center equipment to allow for easy accessibility.
• Resolve operational, infrastructure, or hardware incidents within the data center.
• Monitor the network using SolarWinds Orion.
• Administer the Alcatel VoIP system.
• Administer the Ramos data center monitoring system.

Support to all Employees in HQ and Branches of Family Bank
• Network: Design, Installation and Maintenance Network, LAN Connectivity, Routers and Switches
• Firewalls: Installation, Configuration, and Management (Fotigate & Stormshield)
• Microsoft Related Technologies: Windows Server 2016, Exchange Server 2016 Installation,
Configuration, Monitoring, and Maintenance
• Virtual Technology: EXSI, VCenter and VMWare: Installation, Configuration, Monitoring, and
Maintenance
• Remote access Solutions Support VPN and Terminal Services (Zain & Sudatel).

Providing technical services and support for the following areas:
• Network: Design, Installation and Maintenance Network, WAN and LAN Connectivity, Routers and
Switches Firewalls: Installation, Configuration, and Management
• Microsoft Related Technologies: Windows Server.
• Remote access Solutions Support: VPN and Terminal Services (Zain & Sudatel).
• Time Machine Installation, User Management and Data Collection for Time Management.

Providing technical services and support for the following areas:
• Network: Design, installation, and maintenance of network, WAN, and LAN Connectivity, Routers and
Switches for HQ and Branches, as well as more than 50 external offices
• Firewalls (STORMSHIELD): installation, configuration, and management
• Microsoft related technologies: Windows Server, Exchange Server, and Kerio Connect Server
• Remote access Solutions Support: VPN and Terminal Services (Zain & Sudatel)
• Time Machine installation, user management, and data collection for Time Management
• AMAN Insurance System (Installation, Configuration and Management).

• ICT equipment installation like computers, printers, and scanners.
• Routers, switches, and wireless devices.
• Network device installation and troubleshooting.
• CCTV camera system installation, connection, and troubleshooting.

• Introduction about network devices such as hubs, repeaters, switches, routers, and servers, and network
concepts in general.
• Connecting cables and troubleshooting.
• Using Packet Tracer to create networks using routing protocols such as RIP, OSPF, EIGRP, Static, and
troubleshooting. - Managing, maintaining, repairing, and troubleshooting computer labs.

• Responsible for handling a high volume of inbound customer calls to provide quality service and resolve
billing enquiries.
• Explain products and services to customers.
• Troubleshoot service equipment issues.

• Follow up installation of routers, switches, and servers.
• Configure LAN, WAN, IP, and basic settings.
• Configure routing protocols (OSPF, BGP, RIP, EIGRP, and static)
• Troubleshoot BGP (internal and external).