M.Waleed Khaliq

Experience

• 

  TÜV NORD GROUP

  Jan 2011 - Feb 2016

  IT Specialist

  Implementation of enterprise information security policies within business and IT areas, development of automated processes and policy integration, and ensuring that policies support regulatory requirements for the ISO ISMS 27001. Keep the business units updated with the changes in the ISO 27001 applicable policies, standards and procedures. Delivered hands-on training workshops and partnered with business partners to improve training plan for enterprise policies in order to achieve overall compliance. Implemented Complain Management and Ticketing System using Zendesk. Implemented and working with UTM based Firewalls (DELL Sonic Wall & Sophos UTM). Working on AWS (Amazon Web Services) Cloud Services maintaining company VPC infrastructure and managing web servers. Microsoft Dynamics AX 2012 ERP Implementation and Administration. Team leading, IT Project Implementation / Management and Post Implementation Support. Involved in the Implementation of Microsoft Dynamics AX for the whole group. Facilitating the reporting authorities about the status of the implementation. Performs internal audits for various profit centers within the company. Planning, developing, co-coordinating, implementing, maintaining, and Managing WLAN infrastructure of Rukus wireless zone director and access points.Working on Network Time Synchronization: Commissioning and testing S300 Rubidium Atomic NTP servers Ministry of Interior (MOI) Doha , Qatar Commissioning and testing S350 Rubidium Atomic NTP servers at KAUST (King Abdullah University of Science and Technology.)Commissioning & testing of S350 Rubidium Atomic NTP server in SFDA (Saudi Food & Drug Ministry-Riyadh) sync with the GPS satellite. Commissioning & testing of NTP S300 Rubidium servers at Al-Rajhi head office and their Disaster recovery site. Commissioning of and testing of NTP S300 Rubidium servers for Alcatel-Lucent in Qatar Foundation. Show less

• 

  Islamic Development Bank (IsDB)

  Dec 2015 - Nov 2016

  Information Security Analyst

  IBM QRadar Implementation and AdministrationIncident ManagementVulnerability Assessment• Plan, implement and upgrade security measures and controls• Establish plans and protocols to protect digital files and information systems against unauthorized access, modification and/or destruction• Maintain data and monitor security access• Perform vulnerability testing, risk analyses and security assessments• Conduct internal and external security audits• Anticipate security alerts, incidents and disasters and reduce their likelihood• Manage network, intrusion detection and prevention systems• Analyze security breaches to determine their root cause• Recommend and install appropriate tools and countermeasures• Define, implement and maintain corporate security policies• Train fellow employees in security awareness and procedures Show less

• 

  NourNet

  Dec 2016 - May 2021

  SOC Manager

  Manager McAfee ESM SIEM solution and McAfee Enterprise Security Suite (Application Control, Threat Intelligent Exchange, MSME, NSM, ePO,) Firewall Analyzer, Application Firewalls, Email Sandboxing, Email Gateway . Collaborate with technical security assessment (intrusion testing) and cyber threat intelligence teams to validate security events and perform advanced analysis. Lead staff to proactively identify, prevent and respond to security incidents. Lead and manage security incidents from identification through remediation. Lead team in next-generation firewall (NGFW), Intrusion Prevention System (IPS) and SIEM management, maintaining and improving organization defensive controls. Manage team efforts to monitor for security events and provide first and final escalation analysis. Professional communication, including executive level, and documentation of processes and procedures. Foster relationships with industry partners and customers to ensure monitoring compliance and smooth incident response. Manage SOC team of 6 analysts. Show less

• 

  Saudi Business Machines - SBM

  May 2021 - Oct 2021

  SOC Leader
• 

  Managed Services Company

  Sept 2021 - Sept 2023

  Security Operations Center Manager
• 

  EY

  Sept 2023 - Apr 2024

  Security Operations Manager
• 

  Golden Lattice Investment Company (LATIS)

  Jan 2024 - now

  Information Technology Infrastructure Manager