سلمان الصالح

• Built the Cybersecurity department from the ground up.
• Developing a comprehensive plan for the Cybersecurity gap analysis to find all the areas to improve in airports in the kingdom.
• Creating all enterprise Cybersecurity policies and procedures in MATARAT with unification across all the airports in the kingdom.
• Building a centralized SOC to monitor the security posture of all airports in the Kingdom.
• Managed to drastically increase NCA compliance by 40% in the first 2 months.
• Significantly enhanced awareness of Cybersecurity goals and priorities across MATARAT lines of business and technology, improving program outcomes because of improved partnership and planning.
• Lead strategic planning and development of Cybersecurity roadmaps and strategic initiative portfolio.

Managed the Operations side of the department that handled Incident handling and response, Access management, and Vulnerability management.
• Delivered strategic plans and technology roadmaps, adhering to corporate standards and architectural guidelines.
• Collaborated with Procurement, Finance and Risk management to develop comprehensive third party standards and procedures to reduce risk, control spending and improve controls.

Overhauled Tadawul’s information security policies to make it concise and patched many of its loopholes.
• Analyzed and mitigated security vulnerabilities, attacks, and other realized risks. Stopped leakage of sensitive information and prevented damage to the firm’s reputation on numerous occasions.
• Conducted hundreds of cyber incident investigations relating to malware, anomalous network activity, and miscellaneous events to full remediation.
• Reduced the false positive incidents by 50% by tweaking the filtering rules on our monitoring systems.
• Maintained the enterprise multi-layered security systems such as Fireeye, Mcafee, Symantec, and RSA
• Deployed the Database security system that maintains the access management for the enterprise databases.

Overhauled Tadawul’s information security policies to make it concise and patched many of its loopholes.
• Analyzed and mitigated security vulnerabilities, attacks, and other realized risks. Stopped leakage of sensitive information and prevented damage to the firm’s reputation on numerous occasions.
• Conducted hundreds of cyber incident investigations relating to malware, anomalous network activity, and miscellaneous events to full remediation.
• Reduced the false positive incidents by 50% by tweaking the filtering rules on our monitoring systems.
• Maintained the enterprise multi-layered security systems such as Fireeye, Mcafee, Symantec, and RSA
• Deployed the Database security system that maintains the access management for the enterprise databases.

Design the network department long-term goals to improve the efficiency and productivity.
Convey management vision and goals into practical results.
Achieved full visibility over the network infrastructure by utilizing various monitoring applications such as HP NNMi and SevOne.
Managed to reduce wan links utilization by pinpointing abnormal top talkers in the network using RiverBed's steel central net flow profiler.
Reduced the operational costs of the network MPLS by 50% by deciding with implementing the Riverbed WAN optimization solution
Led the network department to achieve its goals with increased efficiency by setting challenging yet fair personal goals and KPIs to the team.

Designed and implemented the new infrastructure for monitoring all the company’s systems using Zabbix monitoring tools.
Zabbix uses SNMP traps and agents to capture systems’ and applications’ metrics.
Managed Ticketing systems for reporting and documenting system alerts and outages using Service-Now and Jira.
Successfully implemented Splunk to monitor and capture applications metrics by establishing wide range of graphs that helped the NOC operate more efficiently.
Managed and configured access lists in Cisco routers

Successfully installed and maintained Microsoft Exchange server for the startup company.
Successfully tested a replica of a network infrastructure for a client using Windows Azure.