Hafidh faleh

Responsible for Cyber Security work-package For RTA (Road and Transport
Authority) Dubai government smart city project (EC3 Enterprise Command & Control Center).
Leading Cyber Security deliverables and implementing security solutions complaint with customer requirements and security policies.
Ensuring the implementation of cyber security initiatives related to the project.
Respond to cyber security incidents and provide technical actions to remediate against cyber security threats.
Conduct Security Assessment on information assets and lead the penetration and vulnerability assessment programs.
Evaluate the network architecture design by enhancement of security rules on
Firewalls, IPs, VPN and network devices and ensuring the hardening of the systems and appliances.

Ensures organization-wide compliance to the information security management system and reports non-conformances to the Information Security Steering Committee and Board of Directors.
Supervises and ensures the effective implementation of controls in accordance with the Information Security Regulation (ISR).
Lead technical team to address in Incident Response and security operation activities.
Improve the implementation of information security initiatives and evaluation of security solutions.
Provide cyber security advices for the improvement of cyber resilience capability from
related critical security threats.

• Cyber security consultant responsible for supporting the cyber security consulting practice within PwC Middle East in several domains including security operations, penetration testing, industrial control systems security, ISO 27001 and vulnerability management.
• Contributing to cyber security business development cycle through engaging with potential clients and participating in proposals development.
• Engaging in projects with leading clients in GCC.

• Led technical team responsible for designing and specifying techniques for detecting and tracking cyber-attacks and for development of “Cyber Early Warning System” project for National Agency for Computer Security (TunCert).
• Conducted several security assessment, penetration test, incident-handling and legal forensics for several critical infrastructures in Tunisia.

• Responsible for network modules development and integration Linux / embedded.
• Writing design, test and integration documents.
• Coding and implementation of open-source solutions.
• Code revue, Technical Assessment and pentest.