Experience

• 

  Efg-hermes

  Jan 2009 - Aug 2012

  Information security engineer

  Administion, configuration, and installation of IBM Site Protector Management Console and HP Tipping Point.Assist the Help Desk team with malware removal and other security-related issues.Conduct periodic vulnerability assessments and identify security risks using tools such as Nessus and Acunetix.Manage the operation and maintenance of key security technologies, including Websense, Kaspersky AdminKit, RSA SecurID, and Safeboot device encryption.Deploy, configure, and tune RSA Envision across multiple branches, improving visibility and incident response capabilities Show less

• 

  Huawei technologies

  Aug 2012 - Jun 2013

  Application & software support engineer

  Troubleshoot and resolve daily technical issue related to HUAWEI telecommunication application like : Ring back tone and Billing. Cooperate and support operation team temporarily with deployment and configuration of HUAWEI applications during project implementation and delivery.

• 

  Rsa security

  Jun 2013 - Nov 2016

  Senior security support engineer level iii at rsa

  Support and resolve daily technical issues for customers using RSA products, including RSA SecurID, RSA NetWitness, and RSA NetWitness Endpoint, ensuring high-quality customer satisfaction.Develop and author knowledge base articles to address common issues.Conduct RSA product training for junior engineers and new team members, contributing to skill development and products readiness.Mentor junior support engineers and acted as the primary escalation point for complex cases, managing communication with product engineering teams to expedite issue resolution and enhance product reliability. Show less

• 

  Abu dhabi islamic bank - egypt

  Jan 2017 - Jan 2018

  Senior information security analyst

  Participate on endpoint detection and response (EDR) proof-of-concept and technical evaluation projects across three different vendors, providing key insights for vendor selection.Conduct static code reviews for .NET and Java applications, as well as database procedures, using a combination of manual analysis and automated tools to identify potential security risks.Serve as second-line support for the outsourced Security Operations Center (SOC) team, assisting with the analysis of malicious documents (e.g., Word, PDF) enhancing incident response effectiveness.Perform regular vulnerability scans on databases using commercial software and collaborate with the database team to support timely patching and risk mitigation. Show less

• 

  Flydubai

  Jan 2018 - Jul 2018

  Soc consultant

  Develop and deploy custom use cases and dashboards within RSA NetWitness to enhance SOC team monitoring and streamline daily security operations.Support junior SOC analysts in investigating incidents and acted as a primary contact during crisis or breach management, ensuring coordinated response and swift resolution.Conducted in-depth investigations of suspicious security events using tools such as RSA NetWitness and LogRhythm, identifying and mitigating potential threats.Review and update SOC incident response procedures for various attack vectors, including phishing and malware infections, aligning practices with evolving security threats.Deliver remote training on RSA Security event management and endpoint tools for junior analysts Show less

• 

  Te data

  Dec 2018 - Sept 2019

  Senior soc analyst

  Oversaw and guide junior analysts in investigating security incidents using IBM QRadarMonitor and analyze daily security events within IBM QRadar to identify suspicious activities, providing recommendations for remediation and effective resolution of security issues.Led the successful implementation of the IBM QRadar Tazkareti project, managing log source collection, configuring the product, and integrating threat intelligence feeds to enhance detection capabilities

• 

  Amazon web services (aws)

  Nov 2019 - Mar 2020

  Cloud support engineer(security)

  Diagnose and resolve technical issues related to AWS security services for customersUse Technical along customer support skills and experience to identify improvements and develop workarounds, guiding AWS customers in securing and optimizing their cloud environments.

• 

  Rsa security

  May 2021 - Dec 2023

  Senior principal support engineer

  Participate on the onboarding process for new hires, ensuring a smooth knowledge transfer.Discuss cases with support team, providing feedback and taking appropriate actions to maintain high-quality support standards.Validate new product patches and features by testing in a lab environment, ensuring functionality and reliability before deployment.Mentor and coach junior team members, fostering skill development within the team.Manage highly escalated cases with professionalism, delivering effective resolutions for complex issues.Approve and validate knowledge-based articles Show less

• 

  Dell technologies

  Mar 2024 - now

  Soc consultant

  Review and validate alerts from QRadar and LogRhythm to ensure accurate incident detection and handling.Serve as the escalation point for handling true positive incidents, and ensuring timely and effective response.Investigate security incidents using tools such as EDR, Azure Cloud, Proxy, Email Security, Threat Intelligence, and WAF.