alaa ALI

Highly organized cyber security expert with 9 years’ experience with government national CERT, performed offensive and defensive assessments such as penetration testing, vulnerability Assessments, controlling AV, WAF, SIEM, DLP, email gateway, incident Handle and web proxy tools. Additionally, developing cyber defense programs and infrastructure testing (internal & external), web application security assessments and wireless network security technologies responsible for protecting government and corporate interests, certified in the field of cyber security (CEH - RHCSA).

• Perform network penetration, web and mobile application testing, source code reviews, threat analysis, wireless assessments, and social-engineering assessments.
• Regularly Scanning and reviewing the Cyber Security risk event log for common causes/ themes and providing an analysis of potential impacts to the business.
• Knowledge of Threat Hunting, Cyber Kill Chain Attack, and MITTER ATT&CK Framework.
• Install, configure, manage, and maintain mission-critical enterprise applications such as Firewalls, SIEM (e.g. LogRhythm, and Splunk), DLP, log management and other technical controls.
• Endpoint Detection and Response [Kaspersky anti-Virus | Cisco AMP].
• Leading government critical infrastructure (SCADA - PLC) project.
• Managing data collection and analysis for digital forensic evidence (computer, mobile, network, cloud).
• Responding to requests from the judicial authorities to provide digital evidence.
• Assist in the development of customized policies, procedures, incident response, plans and technical documentation for applications, systems, and infrastructure.
• Proactively conducting threat hunting to detect the abnormal activities.
• Conduct periodic cyber security awareness training (CHFI – CEH – RHCSA – information security - cybercrimes), fishing simulation exercises, CTF, and National Drill for students, company employees, policy makers, cyber security specialists and law enforcement agencies.

• Investigated cyber threats, and policy specification and management.
• OSINT Framework (Maltego, Mitaka, Spyse, OSINT Framework, Social media).
• Solid understanding of cloud Architecture and potential security issues related to PaaS, IaaS, SaaS and understanding of IAM, and Data Loss Prevention (Azure, AWS, and Google Platform Amazon).
• Performed Enterprise Antivirus scanning and updates for corporate devices.
• Present solutions and defined security requirements to audiences.
• Develop and implement manual and automated web application security testing.
• Developed, maintained, and troubleshot various information technologies security elements in a Linux, UNIX, and Windows environment.
• Hardware management, maintenance and troubleshooting of computer hardware.
• Analyze log files related to network traffic, firewalls, IDS, IPS, NAC and DNS.