Incident Response Team Manager
Libya Computer Emergency Response Team (LY-CERT)
Total des années d'expérience :18 years, 6 Mois
LY-CERT is the national Computer Emergency Response Team (CERT/CSIRT) in Libya, established with the goal to become the central contact point for public and private organizations and citizens to address matters related to Computer Security, Malware, Vulnerabilities, and Online Fraud.
LY-CERT provides incident response, incident handling and reporting, penetration testing, intrusion detection services and vulnerability assessment
As a technical manager, it’s my responsibility to coordinate accurate response to computer security incidents by providing all necessary services to solve the problem, and to manage the incident response team accordingly. I also write advisories on vulnerabilities and malware activities as well as issue weekly/monthly/annually advisories.
Contracted under Arkan as an independent information technology and security consultant and brought on board to oversee the company IT infrastructure and to provide security measures to combat business cyber threats and enforce corporate security policies and guidelines.
• Maintained security of voice and data networks and equipment. Monitored and maintained physical and logical security and access to systems. Responsible for support of existing security policies and procedures
• Recommended preventive, mitigating, and compensating controls to ensure the appropriate level of protection and adherence to the goals of the overall information security strategy.
• Conducted technical risk evaluation of hardware, software, and installed systems and networks.
• Assisted with testing of installed systems to ensure protection strategies are properly implemented and working as intended.
• Organized security awareness training to educate employees regularly on security threats and corporate information technology use policies.
Contracted under Arkan as an independent information technology and security consultant and brought onboard to join the project management team for the Libyan Citizens ePassport Border Control System.
Project Challenge: Design and implement a governing security policy for the entire system in compliance with the Libyan and International Information Security Compliance Policies.
Action: Took 3 months to design, document, and re-factor the project security framework and establish new proven patterns to provide a more stable and secure system. Took another 3 months to implement the new framework into the project infrastructure.
Project Impact:
• Project security compliance has been brought up from 40% to 95% according to customer and 3rd party compliance testing.
Launched this information technology consultancy company to analyze business requirements and design secure systems for clients including the Libyan Citizens ePassport Border Control System for NEC Corporation.
Arkan provides a full suite of Information Security services- including Security Policy Development and System Analysis, Audits and Vulnerability Assessments, Implementation and Integration of security and networking technologies, and Managed Services- geared towards assisting businesses with their Information Security Program.
As a Chief Consultant at Arkan, I have been responsible to manage delivery of various information security services, such as:
• Penetration Testing
• Forensic Investigations
• Risk Assessment and Reporting
• Security Policy Design
• Security Projects Management
• Policy Compliance Testing
Recruited to provide leadership to the networking team and oversee the security of a major project spanning multiple locations around Enterprise Resource Management (ERM), Customer Relations Management (CRM), and e-Procurement Solutions.
• Played a critical role in the design and implementation of the infrastructure for this project, including Active Directory design, VPN design, Security design and planning using Cisco ASA and Fortinet Security Appliance.
• Project Management tasks, documentation and reporting, team assignments, …etc.
• Active Directory tree design, System Update Management, and Change Management.
• Hardware planning and deployment.
• Managing and monitoring the project datacenter.
• Completed the project successfully ahead of schedule
Started as a Junior Engineer and been promoted several times to the position of Senior Systems Specialist
• Performed comprehensive network management functions, i.e. design, implementation, and administration of all nodes of internal network, such as: email, web, SQL, storage, print servers, enterprise antivirus solutions, firewalls, VPNs, switches, routers, backups, disaster recovery planning, wireless networks, Active Directory domain, DNS servers, Linux Servers, etc.
• Played a critical role in the development of company policies and procedures governing corporate security, email and Internet usage, access control, and incident response.
• Managed, monitored, and provided technical support on Cisco routers and switches, Windows and Linux servers; performed on-site installations (wiring/configuration), configuration of routers, switches and firewalls, Windows networks.
• Involved in training planning and customer relations.
• Assisted in the management of multiple projects including Electronic Content Management and Passport Control.