Sanad Almalki

Experience

• 

  General Authority for Meteorology and Environmental Protection

  May 2018 - Aug 2018

  Cybersecurity Intern at General Management for Cybersecurity
• 

  General Authority for Meteorology and Environmental Protection

  Apr 2019 - Dec 2019

  Cybersecurity Specialist

  •Monitoring and troubleshooting computer networks for security issues.•Investigating security breaches and other cybersecurity incidents.•Operate software to protect systems and information infrastructure, including firewalls.•Documenting security breaches and assess the damage they cause.•Working with security colleagues to perform tests and uncover network vulnerabilities.•Fixing detected vulnerabilities to maintain a high-security standard.•Keeping up-to-date on information technology trends and security standards.•Helping in developing best practices for Cyber Security.•Performing penetration tests and vulnerability assessment.•Helping colleagues install security software and understand information security management.•Research security enhancements and make recommendations to management.•Ensuring security measures for the protection of the organization's data, systems, and networks are implemented.•Responding to system and network security breaches.•Supervised in the change management process.•Utilizing security systems, analyzing security requirements, and recommending improvements.•Monitoring network traffic for suspicious behavior.•Creating network policies and authorization roles and defending against unauthorized access, modifications, and destruction.•Supporting security tools, such as firewalls and anti-virus software. Show less

• 

  SITE سايت

  Jan 2020 - Nov 2022

  • Performing penetration tests on computer systems, networks, web, and mobile applications.• Create new testing methods to identify vulnerabilities.• Pinpoint methods and entry points attackers may use to exploit vulnerabilities or weaknesses.• Research, evaluate, document, and discuss findings with IT teams and management.• Review and provide feedback for information security fixes.• Establish improvements for existing security services, including hardware, software, policies, and procedures.• Identify areas where improvement is needed in security education and awareness for users.• Being sensitive to corporate considerations when testing (minimize downtime and loss of employee productivity). Show less

  • Senior Analyst, Penetration Testing and Vulnerability Assessment

    Jan 2022 - Nov 2022

  • Analyst, Penetration Testing and Vulnerability Assessment

    Sept 2020 - Dec 2021

  • Trainee, Penetration Testing and Vulnerability Assessment

    Jan 2020 - Aug 2020
• 

  Confidential Government

  Mar 2021 - Aug 2022

  Cybersecurity Advisor

  Working with a high-profile governmental entity to build and develop digitalized, standardized cybersecurity policies and procedures, ensuring to maintain of a high-security standard by working in different fields including but not limited to:• Governance, Risk, and Complianceo Developing best practices for cybersecurity.o Research security enhancements and make recommendations to management.o Creating network policies and authorization roles, defending against unauthorized access, modifications, and destruction.• Penetration Testingo Perform penetration tests on computer systems, networks, web, and mobile applicationso Pinpoint methods and entry points attackers may use to exploit vulnerabilities or weaknesses• Digital Forensics and Incident Responseo Investigating security breaches and other cybersecurity incidents. Show less

• 

  THIQAH Business Services

  Nov 2022 - Sept 2023

  Penetration Testing Sr. Specialist
• 

  Riyad Bank

  Oct 2023 - now

  AVP | Cyber Security DevSecOps Senior Specialist