mohammed alaa borji

CISO at Confidentiel

• Saudi Arabia - Riyadh
• My current job since April 2018

Senior Information Security Engineer, at Tamkeen

• Saudi Arabia - Riyadh
• January 2014 to April 2018

Client: Technical and vocational training corporation (TVTC)
 Provides vision, technical design and monitoring of security solutions to meet industry best practices
and legal, compliance requirements.
 Designs, implements and tests technical solutions to ensure compliance with business continuity and
disaster recovery requirements.
 Audits and implements technical documentation of information security solutions. Internal audit ISO
27001
 Develops and implements technical security policies, procedures and guidelines for multiple
platforms and systems including network devices, servers, and workstations. Implements controls to
ensure their compliances.
 Work with project teams to understand security requirements for applications and SIEM solutions
and determine how best to implement them.
 Technology architecture and management of infrastructure components such as F5 load balancers,
Cisco switches and routers, Next generation firewalls, VPNs and email security systems.
 Consulting for other Tamkeen’s clients ( COE, SSS, Takamol, HRDF, ...)

Information Security Engineer analyst, at tvtc

• Saudi Arabia - Riyadh
• September 2012 to January 2014

Client: Technical and vocational training corporation (TVTC) And Ministry of Labor (MOL)
 Monitor system logs, SIEM tools, and network traffic for unusual or suspicious activity
 Investigate and resolve security violations by providing postmortem analysis to illuminate the issue,
and identify causes, possible solutions, and preventative measures
 Respond to, and when appropriate, resolve and/or escalate security incidents
 Assist and train team members in the use of cloud security tools and the resolution of security
issues
 Analyze potential impact of new threats and exploits and communicate risks to relevant business
units
 Collaborate with the DevOps team to proactively identify and fix security flaws and vulnerabilities.

Information security analyst at CBBC

• Tunisia - Tunis
• January 2008 to September 2012

Client: Biotechnology Center Borj Cedria and Tunisian National Agency for computer security
 Detect, investigate and recover from security incidents as well as assisting with incident response
plans and root cause analysis
 risk assessments, vulnerability management, penetration testing and patch management
 Conception and Building a Security Operation Center
 Internal auditor ISO 27001,
 Develop Information Security Plans and Policies.
 Firewall and IPS administrator,
 SIEM administrator,
 Datacenter and infrastructure operation.

System engineer and Technology Coach, at ISET TATAOUINE

• Tunisia
• September 2004 to January 2008

Client: Higher Institute of Technological Studies of SFAX and TATAOUINE
 Off-site (in-house) training for Education Technology faculty members
 Providing training for students and personnel in the ministry.
 Maintain and manager servers
 Installing and configuring Security Open source tools (firewall, SIEM, server’s status monitoring
tools...)

Establishment of an eLearning platform that is within the scope of cooperation with the Haute
Ecole Robert Schuman Belgium