Professional Information Security

• Apr 2022 - Present

Information Security Assurance Specialist

• Dec 2018 - Mar 2022

● Responsible for Global Network Security Control, focusing on the state of the Network security with compliance testing, penetration testing, vulnerability testing, et ● Responsible for implementing a global phishing assessment program and awareness, in order to educating all employees of security threats they face in their jobs, and how to defend against them. ● Participate in PCI Certificate annual assessment in term of (Network segregation, Network PT, PCI application PT). ● Firewall rules review and approval process and to continually assure security effectiveness across the network infrastructure. ● Perform a periodic network vulnerability scan with tools such as (Nessus, Tenable, Rapid7) to Identify, analyze, and prioritize detected vulnerabilities along with remediation and closure timeline(s). ● Apply 2nd level Review and validation for sufficiency and proper closure of security related incidents. ● DLP officer, responsible for monitoring all Data Loss Prevention/Protection events, complete initial investigations, and escalation of all necessary events to appropriate incident teams once determined as a true incident. ● Participate in producing Network security compliance and dashboards. ● Stay current on security trends and industry best practices; provide input and recommendations based on research. Show less

Security Operations Center (SOC) Analyst

• Jun 2016 - Nov 2018

SOC Analyst at Umniah. The major role is 24/7-network performance monitoring on customers network and our company network. maintain the information security in terms of Confidentiality, Integrity and Availability ,and incident handling by monitoring , analyzing, mitigating, reporting and document. working on security system such as (RSA SIEM, Arbor DDos system) and other security devices. Real-time security log and event monitoring and analysis,Triaging critical security events detected by security monitoring operations tools. Utilize security event and incident management system to detect anomalous or malicious activity,threat containment,and mitigation, escalate to the next level as needed based on severity. Add the latest IOCs Feeds to our security controls and block bad reputation IP’s ,domains,and email . Provide weekly, monthly, and quarterly reports of monitoring and analysis activities. Provide telephone, e-mail and ticket service to customers. Participated in two Penetration testing projects in addition some Vulnerability assessment projects for network and web application, worked with tools such as (MSF,InsightVM, Nessus, Netsparker). Show less

outsource Network engineer and IT technical support at (Azadea group)

• Apr 2015 - May 2016

Azadea group is a retail shops group in Jordan my job was to support and serve over 100 employee include back office and shops. Install software and hardware (pcs, laptops, printers, Telephony Systems, outlook, word, excel, anti-virus programs). Keep checking for windows, antivirus update and take a backup for the critical data (daily, monthly, yearly). Problem Diagnosis and troubleshoot, Performing remote troubleshooting Determining the best solution based on the issue and details provided. Opened customer incident on ticketing system to manage the workflow. Preventive Maintenance for technical hardware and software issues involving internet connectivity. Show less