Position: Cybersecurity
Category: Security
English level: fluent
Years of experience: 7

Comptia CySA +
Comptia Security +
Preparing PNPT
Symantec Email Security Certified
•	Tools that I am working on daily basis: Cortex XDR, Nessus, InsightVM |Rapid7, Intsight |Threat Intelligence ,Intruder |external vulnerability scanning, Mandiant |TI, SocRadar|TI,  CrowdStrike TI, PrismaCloud, BurpSuitePro
•	Participating in internal penetration testing when there is a critical or trending vulnerability
•	I hunt for threats internally with the Cortex XDR data lake with special XQL queries.
•	As a member of CTI team I do read and follow many news sources and research websites included but not limited UNIT42.
•	I love findings new tools and techniques to enforce our security and decrease the attack surface.
•	Container security and AWS. I run deployment of  Prisma Cloud on on premises containers and AWS container environment to harden the configuration in there and also patch the vulnerabilities. 
•	I do research on Dark and Deep web threat actors that target our country and the banking sector.
•	Threat modeling. I spend some of my time digging into security flaws in our architecture and recommend the hardening options
•	I run PoCs of different security products over time base on our needs and evaluate and reporting the executive management.
•	Web Application Penetration testing via BurpSuitePro, NMAP, OWASPZAP, various other tools
•	Deployed Cortex XDR from scratch, integrated with multiple tools, tuned rules, and policies
•	I am the administrator and manager of internal vulnerability management, contacting patch managers in weekly basis to speed up and help with remediation plans. Help all patch managers with reporting and patching issues. 
•	Assist in building processes creation for Vulnerability Management, Digital Forensics, Incident Response
•	Digital Forensic Acquisition and Preservation using FTK
•	SOC level 2 incidents, isolation, response, and tuning to prevent future attacks from the same origin
•	Tuning and Automating processes on various tools to reduce 
•	Researching on daily basis to keep infrastructure updated and protect it from critical vulnerabilities 
•	Investigating routine security-related breaches and incidents.

Kali Linux
XDR
Threat Intelligence
SOC2 Analyst duties
DLP
Sales Force
Jira
Confluence
Salesforce
To do:
Threat Hunting 
Penetration Testing
Threat Intelligence 
Cyber Security Analyst
Level 2 incident response
Cyber security Researcher 
Do not want to :
Infosec (compliance)