Summary
Overview
Work History
Education
Skills
Certification
Languages
Timeline
GeneralManager
Ghanim Almarzooqi

Ghanim Almarzooqi

Abu Dhabi ,United Arab Emirates

Summary

Leading global incident response and operational security involves swiftly managing security incidents, protecting information assets, and ensuring compliance. This includes maintaining a strong security posture to uphold brand reputation, continuously monitoring the technology landscape for threats, validating security monitoring requirements, and working closely with internal stakeholders to ensure system integrity.

Overview

13
13
years of professional experience
5
5
years of post-secondary education
3
3
Certification

Work History

Lead, Cyber Security Incident Response

TAQA
Abu dhabi , UAE
10.2022 - Current
  • Managed incident response operations to ensure quick resolution of security breaches.
  • · Provide information security services with global continuous security monitoring.
  • Developed comprehensive incident response plans, improving organizational preparedness.
  • Coordinated with IT teams for efficient handling of cyber threats.
  • Conducted thorough investigations into security incidents, ensuring proper documentation.
  • Led debriefing sessions post-incident, identifying areas for improvement and learning opportunities.
  • Performed root cause analysis post incident; implemented corrective actions preventing future recurrences.


  • Designed and executed comprehensive security awareness initiatives to educate employees on best practices and emerging threats.
  • Monitored and managed the company’s brand reputation by implementing proactive security measures and responding to potential threats effectively
  • Led projects from inception to completion, including budgeting, procurement, and implementation
  • Handled key performance indicators (KPIs) and operational level indicators (OLIs) to monitor and improve IT security performance and operational efficiency.
  • Ensured all vulnerabilities were addressed by reviewing Common Vulnerabilities and Exposures (CVE)


Specialist Cyber Security Incident Response

TAQA
Abu dhabi , UAE
11.2020 - 10.2022
  • Provide information security services with global continuous security monitoring.
  • Key responsibilities include understanding SIEM technologies,
  • technical investigation tools
  • risk and vulnerability analysis
  • analyzing network patterns
  • reviewing security events and logs, and threat hunting.

Sr Analyst - Cyber Security

DEWA
Dubai , UAE
01.2015 - 11.2020
  • Network Traffic and Threat Defense Monitoring: Monitored and inspected network traffic, threat defense systems, and user behavior patterns.
  • Incident Response and Threat Hunting: Conducted threat hunting and empowered incident response.
  • Threat Intelligence Handling: Managed cyber security threat intelligence and Indicators of Compromise (IOC).
  • Security Event and Log Review: Reviewed security events and logs to identify potential threats.
  • Reporting: Prepared weekly and monthly reports for top management.
  • Network and User Behavior Analysis: Analyzed network patterns and user behavior to detect anomalies.
  • Ad-hoc Incident Response: Performed ad-hoc incident response tasks, including Blocking IP addresses, URLs, and domains
    Blocking email senders
    Remotely containing compromised devices


Customer Service

Sharjah Municipality
Sharjah , UAE
01.2012 - 02.2015
  • Improved customer satisfaction by promptly addressing and resolving complaints.
  • Provided information for product inquiries, leading to reduce time to action the permission.
  • Ensured smooth transactions with the use of up-to-date POS systems.
  • Assisted customers in navigating company in Advertisement section,

• Dealing with advertisement request in advertisement section

• Inspection in the advertisement out field

Education

Bachelor of Applied Science - Information Systems Security and Forensics

Higher Colleges of Technology
UAE
06.2010 - 07.2015

Skills

  • Incident management
  • Risk assessment
  • IT infrastructure understanding
  • Network security techniques
  • Threat evaluation
  • Risk and vulnerability Analysis
  • Deep understanding of SEIM solution
  • Project management
  • budget planning

Certification

2023- SEC566 -Implementing and Auditing CIS controls

2019: SEC599 Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses (SANS)

2018: SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling (SANS)

2018: Certified CCNA Routing and Switching (EC-Council)

2017: Certified Ethical Hacking (EC-Council)

2015: Certified Computer Forensic Examiners (Higher College of Technology)

Languages

English
Master or proficient
C2
Arabic
Fluent
A1

Timeline

Lead, Cyber Security Incident Response

TAQA
10.2022 - Current

Specialist Cyber Security Incident Response

TAQA
11.2020 - 10.2022

Sr Analyst - Cyber Security

DEWA
01.2015 - 11.2020

Customer Service

Sharjah Municipality
01.2012 - 02.2015

Bachelor of Applied Science - Information Systems Security and Forensics

Higher Colleges of Technology
06.2010 - 07.2015

2023- SEC566 -Implementing and Auditing CIS controls

2019: SEC599 Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses (SANS)

2018: SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling (SANS)

2018: Certified CCNA Routing and Switching (EC-Council)

2017: Certified Ethical Hacking (EC-Council)

2015: Certified Computer Forensic Examiners (Higher College of Technology)


Ghanim Almarzooqi