rawaz abdalrahman

Lead information security for the group's ISP and enterprise infrastructure, covering security operations, incident response, and data protection. Own the core security control stack including next-generation firewalls, EDR, and WAF, and drive GRC programs aligned with ISO/IEC 27001, NIST CSF, and GDPR.

Designed, secured, and maintained the organization's network infrastructure, including firewalls, VPNs, and network segmentation. Protected sensitive refugee data through access control, monitoring, and system hardening, and ran vulnerability assessments and incident handling.

Developed and maintained software and web applications supporting production and business operations. Secured company systems, networks, and digital media assets through access control, endpoint protection, and backup strategy, and embedded secure development practices (OWASP) into the SDLC.

Built and delivered end-to-end web applications for clients, including front-end interfaces, back-end APIs, and databases. Managed deployment, hosting, and application security for client projects.

Certified Information Security Manager (CISM) certification from ISACA.

CompTIA SecurityX (CAS-005, formerly CASP+) certification.

HCIP-Security certification from Huawei.

HCIA-Security certification from Huawei.

Penetration Tester Path certification from Hack The Box Academy.

Two-day workshop on Designing Enterprise AI Systems from Use Cases to Production Reality.