إسماعيل حسن

Handling Security Operation Center (SOC) daily tasks that include but not limited to:
· Conduct senior level log analysis, proactive monitoring, mitigation, and response to network and security incidents
· Perform Forensic Investigations and malware analysis
· Developing and configuring new offenses/use cases in SIEM
· Security Information and Event Management (SIEM) configuration and administration
· Coordination of incident response activities, communication with other IT groups and IT management
· Creating/enhancing policies, processes, and procedures related to SOC operations
· Preparing and presenting new threats and major security incidents to CISO and management on monthly basis
· Administrator of Vulnerability Assessment solution and conducting VA scan on multiple platforms
· Administrator of Advanced Persistent Threat (APT) and EDR solutions
· Administrator of Database Activity Monitoring solution
· Subject matter expert for new projects
· Project Management and POCs
· Conducting infrastructure compromise assessment
· Audit related functions

- Carry out planning, sizing, designing and project implementations on the following platforms and solutions:
· Database Activity monitoring implementation and consultancy. (IBM InfoSphere Guardium).
· SIEM solution IBM Qradar implementation and correlations.
· Identity and Access management (One Identity solutions).
· FireEye Zero day malware protection and prevention - FireEye EX, NX, CMS, AX, HX appliances.
· PaloAlto Next Generation Firewall and Traps Advanced Endpoint Protection.
· TITUS - Data classification.
· Bit9 + Carbon Black, Next-Generation Endpoint Security.
· Infoblox DNS, DHCP, IPAM (DDI).
· IXIA - Next-gen network monitoring (Net Tool Optimizer, xStreams, Flex taps).
- Project Management.
- Conduct POCs and Presales for advanced security technologies.
- Deliver security training and product oriented trainings on security solutions.
- Provide 3rd line support for advanced and complicated issues and technical problems.
- Provide consultations on best practices and solution placement advice for integrating security solution in
complex network without impacting business continuity.

Ensure the secure operation of the in-house computer systems, servers, applications and network connections.
Secondary tasks include involvement in the implementation of new security solutions, participation in the creation
and or maintenance of policies, standards, guidelines and procedures as well as conducting vulnerability audits and
assessments.
Duties:
· Creates and maintains policies, procedures and standards for the enterprise.
· Monitor the security of critical systems (e -mail server, database servers, and web server) and changes to
highly sensitive computer security controls to ensure appropriate system administrative actions, investigate
and report on noted irregularities.
· Conducting research on new vulnerabilities and threats with special focus on malware analysis.
· Developing techniques to mitigate cyber-security risks from the enterprise network and investigating the
cause of the threats and vulnerabilities.
· Safeguards computer files by performing regular backups, endpoint protection; recommending improvements.
· Implement & monitor strategies agreed by higher management in regards with disaster recovery & high
availability.
· Utilized Security Information and Event Management (SIEM), Intrusion Detection & Prevention (IDS/IPS),
forensics, sniffers and malware analysis tools.
· Establishes information data ownership and consistency in authorizing access and assigning and revoking
privileges.
· Administrating and Troubleshooting Microsoft Windows Server.
· Configure MS Active Directory, setting rules and policies.
· Troubleshooting of desktop, application, networking and infrastructure issues.
· Deploying new hardware, server backups & evaluating new software & security risks.
· Developing

Reporting directly to the IT Manager and collaborating closely with other IT team members to provide high
level of support services to end users, controlling that all hardware, software and network infrastructure is
installed and operates according to standards. Secondary task is responding to queries in a timely and accurate
manner and resolving queries to ensure continuity of work.
Duties:
· Diagnosis of desktop, application, networking and infrastructure issues.
· Acting as the first point of contact for all IT & technical queries.
· Handling Active Directory, DNS, DHCP, security concepts, backup and restore strategies.
· Support LANs, WANs, network segments, internet, and intranet systems.
· Monitor networks to ensure security and availability to specific users.
· Developing the infrastructure and systems to meet the company ’sneeds.
· Involved in the rollout of software updates and patches.
· Provide guidance to end users for the proper use of the system.
· Investigate specialist and complex IT support issues.
· Communicating with third party technical specialists.
· Identifying & reporting on the budgetary implications of IT projects and upgrades.
· Deploying new hardware, server backups & evaluating new software & security risks.
· Responsible for supporting: Windows 7/ Windows Server 2008, Active Directory management Exchange,
Backup products, Anti-Virus products, Email configuration, and Firewall Configurations.