Information Security | SOC | DLP | GRC | Vulnerability Management | Penetration Testing
I am an Cyber Security professional currently based in Riyadh, Saudi Arabia, and I am looking for a suitable opportunity in Riyadh or elsewhere in the GCC.
I have experience working across SOC operations, Data Loss Prevention (DLP), information security, vulnerability management, GRC, and penetration testing.
I have hands-on experience with security operations as well as governance and compliance, including working with security requirements relevant to the Saudi environment such as SAMA CSF, NCA ECC and PDPL.
I am particularly interested in roles where I can be involved in both the technical and governance side of information security rather than simply monitoring alerts.
### EXPERIENCE
My background includes:
* Security Operations and SOC monitoring
* Data Loss Prevention and data classification
* Security policy and DLP rule development
* SIEM monitoring and incident investigation
* Vulnerability assessment and penetration testing
* Risk assessment and risk registers
* Security governance and compliance
* Security awareness and security controls
* Threat hunting and incident response
* Security automation using Python and PowerShell
* Working with internal teams to investigate and remediate security issues
I have worked with technologies and platforms including Splunk, Microsoft Sentinel, QRadar, Kibana, Fortinet, Palo Alto, CrowdStrike, Microsoft security solutions, AWS security tools and various vulnerability assessment and penetration testing tools.
### SAUDI / GCC SECURITY KNOWLEDGE
I have familiarity with security and compliance requirements commonly relevant to organizations operating in Saudi Arabia, including:
* SAMA Cyber Security Framework
* NCA Essential Cybersecurity Controls (ECC)
* Personal Data Protection Law (PDPL)
* ISO/IEC 27001
* NIST Cybersecurity Framework
* PCI DSS
* OWASP
* MITRE ATT&CK
I understand that security in the GCC is not only about technology. Governance, documentation, risk management, regulatory requirements and audit readiness are equally important.
### VULNERABILITY RESEARCH
I also have a background in responsible vulnerability disclosure and penetration testing.
My security research has been recognized by CERT-In, India's national cybersecurity authority, for responsible disclosure of vulnerabilities affecting organizations and applications.
This experience has helped me develop a practical approach to security — identifying weaknesses, understanding the actual risk, and working towards appropriate remediation.
### CERTIFICATIONS
* CEH — Certified Ethical Hacker
* ISO/IEC 27001:2022 Lead Auditor
* Fortinet Cybersecurity Associate
* Google Cybersecurity Analyst
* Cisco Ethical Hacker
* Palo Alto Networks Cybersecurity
* CISSP — Currently preparing
### CURRENT STATUS
Location: Riyadh, Saudi Arabia
Iqama: Transferable
Availability: Available for suitable opportunities
I am open to discussing opportunities with companies, consulting firms, system integrators, cybersecurity providers and other organizations in Saudi Arabia and the GCC.
### ROLES OF INTEREST
* Information Security Specialist
* Cybersecurity Analyst
* SOC Analyst
* Information Security Consultant
* GRC Analyst
* DLP Engineer
* Security Operations
* Vulnerability Management
* Penetration Testing
* IT Security
* Network Security
* Other suitable Information Security / Cybersecurity positions
If your organization is looking for someone with a practical background across security operations, DLP, cybersecurity, GRC and offensive security, I would be happy to discuss the opportunity.
Feel free to contact me by message on WhatsApp and I can share my CV and further details.
Please reach out via:
Phone:+966-542926188
### END
============================================================
### Keywords for search optimization IGNORE ####
Information Security, Cybersecurity, Cyber Security, IT Security, Information Security Specialist, Cybersecurity Specialist, Information Security Engineer, Cybersecurity Engineer, Security Engineer, Security Analyst, SOC Analyst, SOC Engineer, SOC Operations, Security Operations Center, Security Operations, Cyber Defense Analyst, Cyber Defense, Blue Team, Red Team, Purple Team, DFIR, Digital Forensics, Incident Response, Incident Handler, Threat Hunter, Threat Hunting, Threat Intelligence Analyst, Security Monitoring, SIEM, SOAR, EDR, XDR, NDR, IDS, IPS, Firewall, NGFW, Network Security, Cloud Security, Cloud Cybersecurity, AWS Security, Azure Security, GCP Security, Kubernetes Security, Container Security, DevSecOps, Secure SDLC, SAST, DAST, SCA, Application Security, Web Application Security, API Security, IAM, Identity and Access Management, PAM, Privileged Access Management, Active Directory, Microsoft Entra ID, Azure AD, Microsoft 365 Security, Zero Trust, ZTNA, SASE, CSPM, CWPP, Cloud Security Posture Management, Cloud Workload Protection, Data Loss Prevention, DLP, Data Protection, Data Privacy, Data Governance, GRC, Governance Risk Compliance, Risk Management, Cyber Risk, IT Risk, Vulnerability Management, Vulnerability Assessment, Penetration Testing, Pentest, Ethical Hacking, Security Testing, OWASP, OWASP Top 10, MITRE ATT&CK, CVSS, ISO 27001, ISO 27002, ISO 22301, NIST, NIST CSF, PCI DSS, GDPR, COBIT, CIS Controls, SAMA CSF, NCA ECC, PDPL, CST, CITC, SDAIA, Saudi Arabia Cybersecurity, Cybersecurity Saudi Arabia, KSA Cybersecurity, Riyadh Cybersecurity Jobs, GCC Cybersecurity, Information Security Saudi Arabia, IT Jobs Saudi Arabia, SOC Jobs Riyadh, Security Analyst KSA, Splunk, Microsoft Sentinel, QRadar, Elastic Security, Kibana, Microsoft Defender, Defender for Endpoint, Defender for Cloud, CrowdStrike, Fortinet, FortiGate, Palo Alto Networks, Check Point, Cisco Security, Qualys, Nessus, Burp Suite, Metasploit, Nmap, Wireshark, Linux, Windows Server, Python, PowerShell, Bash, Automation, Security Automation, ITIL, IT Service Management
