محمد علاء البرجي

CISO في Confidentiel

• المملكة العربية السعودية - الرياض
• أشغل هذه الوظيفة منذ أبريل 2018

Senior Information Security Engineer, في Tamkeen

• المملكة العربية السعودية - الرياض
• يناير 2014 إلى أبريل 2018

Client: Technical and vocational training corporation (TVTC)
 Provides vision, technical design and monitoring of security solutions to meet industry best practices
and legal, compliance requirements.
 Designs, implements and tests technical solutions to ensure compliance with business continuity and
disaster recovery requirements.
 Audits and implements technical documentation of information security solutions. Internal audit ISO
27001
 Develops and implements technical security policies, procedures and guidelines for multiple
platforms and systems including network devices, servers, and workstations. Implements controls to
ensure their compliances.
 Work with project teams to understand security requirements for applications and SIEM solutions
and determine how best to implement them.
 Technology architecture and management of infrastructure components such as F5 load balancers,
Cisco switches and routers, Next generation firewalls, VPNs and email security systems.
 Consulting for other Tamkeen’s clients ( COE, SSS, Takamol, HRDF, ...)

Information Security Engineer analyst, في tvtc

• المملكة العربية السعودية - الرياض
• سبتمبر 2012 إلى يناير 2014

Client: Technical and vocational training corporation (TVTC) And Ministry of Labor (MOL)
 Monitor system logs, SIEM tools, and network traffic for unusual or suspicious activity
 Investigate and resolve security violations by providing postmortem analysis to illuminate the issue,
and identify causes, possible solutions, and preventative measures
 Respond to, and when appropriate, resolve and/or escalate security incidents
 Assist and train team members in the use of cloud security tools and the resolution of security
issues
 Analyze potential impact of new threats and exploits and communicate risks to relevant business
units
 Collaborate with the DevOps team to proactively identify and fix security flaws and vulnerabilities.

Information security analyst في CBBC

• تونس - تونس
• يناير 2008 إلى سبتمبر 2012

Client: Biotechnology Center Borj Cedria and Tunisian National Agency for computer security
 Detect, investigate and recover from security incidents as well as assisting with incident response
plans and root cause analysis
 risk assessments, vulnerability management, penetration testing and patch management
 Conception and Building a Security Operation Center
 Internal auditor ISO 27001,
 Develop Information Security Plans and Policies.
 Firewall and IPS administrator,
 SIEM administrator,
 Datacenter and infrastructure operation.

System engineer and Technology Coach, في ISET TATAOUINE

• تونس
• سبتمبر 2004 إلى يناير 2008

Client: Higher Institute of Technological Studies of SFAX and TATAOUINE
 Off-site (in-house) training for Education Technology faculty members
 Providing training for students and personnel in the ministry.
 Maintain and manager servers
 Installing and configuring Security Open source tools (firewall, SIEM, server’s status monitoring
tools...)

Establishment of an eLearning platform that is within the scope of cooperation with the Haute
Ecole Robert Schuman Belgium