EDUCATION PROFESSIONAL CERTIFICATES PROFESSIONAL TRAINING SPECIALTIES & SKILLS

Transcription

1 MOHAMMAD ALHAMMOURI Dept f Cmputer Science Jrdan University f Science and Technlgy B.O.Bx 3030 Irbid 22110, Jrdan EDUCATION - Dctr f Science, Majr in Cmputer Science Cmputer Security & Infrmatin Assurance. The Gerge Washingtn University, Washingtn DC, USA (May 2008). - Master f Science, Majr in Cmputer Science Cmputer Security & Infrmatin Assurance. The Gerge Washingtn University, Washingtn DC, USA (MAY 2003). - Bachelr f Science, Majr in Cmputer Science. Yarmuk University, Irbid, Jrdan, (JUN 2000). PROFESSIONAL CERTIFICATES - CISA : Certified Infrmatin Security Auditr - GIAC (GCWN): Certified Windws Security Administratr PROFESSIONAL TRAINING - Attack & Cntingency Respnse Planning (ACRP), ICANN, Jrdan - The Certified Infrmatin Systems Auditr (CISA) MOICT, Jrdan - Certified Infrmatin Systems Security Prfessinal (CISSP) ISC2, USA. - Windws Security Administratin SANS Institute, USA. - Enterprise Desktp The Wrld Bank, USA. - ISO IT Service Management: A Technical View The Wrld Bank, USA. - Infrmatin Security Awareness - The Wrld Bank, USA. SPECIALTIES & SKILLS - Infrmatin Security Management - Business Cntinuity & Disaster Recvery - Enterprise Risk Management - Identity Management - IT Audit - IT Gvernance - Netwrk & Applicatin Security - Mbile Banking - Infrmatin Security Plicy - Mbile Payment & Mbile Cmmerce - IT & Security Strategy - ISO 27001, COBIT, PCI DSS

2 PROFESSIONAL EXPERIENCE Business Develpment Cnsultant, Mbile Banking & Mbile Payments Technlgy and Security Cnsultant Assistant Prfessr Jrdan University f Science and Technlgy - Dept f Cmputer Science. Irbid Jrdan (JUL 2009 Current ) Head f Infrmatin Security Jrdan s E-Gvernment Prgram - Ministry f Infrmatin and Cmmunicatins Technlgy (MOICT). Amman - Jrdan (JUL 2009 JUL 2010). Key Respnsibilities: Securing the gvernment netwrk and systems Develp Natinal Infsec strategy Develp IT-related natinal legal framewrk (Cyber Crime Law, E-Transactins Law, Privacy Act, Natinal PKI bylaw). Design, Implement and Manage natinal cyberspace security related prjects such as Natinal Smart Card prject and Natinal Public Key Infrastructure (PKI) Develp Infsec Audit framewrk fr gvernment f Jrdan Design audit plans, security guidelines, and security plicies fr the egov peratins center Planning and designing fr the establishment f Jrdan s Cmputer Emergency Respnse Team (JOCERT). Participate in defining Jrdan s e-gvernment milestnes Participate in develping Jrdan s e-gvernment strategy and Radmap Participate in develping Jrdan s e-gvernment e-services Manage, maintain, and update the natinal InfSec strategies and plicies Manage, maintain, and update the e-gv InfSec strategies and radmap Develp natinal Business Cntinuity Plans and disaster recvery slutins. Facilitate InfSec natinal and steering cmmittees Develp implementatin plans based n InfSec strategy, radmap, plicies, and recmmendatins f InfSec cmmittees. Manage the executin f InfSec implementatin plans, and reprt n prgress Manage InfSec risks and prtect e-gv InfSec assets Part Time Lecturer German Jrdanian University Dept f Cmputer Science. Amman Jrdan (JAN 2010 JUN 2010). Assistant Prfessr 2

3 Jrdan University f Science and Technlgy - Dept f Cmputer Science. Irbid Jrdan (FEB 2009 JUL 2009). Prject Manager SETECS Inc. Silver Spring, MD USA. (FEB 2009 JUL 2009). Respnsible fr designing and implementing Mbile Payment Systems in Sri Lanka and East Africa. Cmputer Security Specialist The Wrld Bank, Washingtn DC - USA. ( ) Respnsible fr designing and implementing Wrld Bank Public Key Infrastructure (PKI), Smart Cards, Single-Sign On, Netwrk and user authenticatin. Wrld Bank PKI Administratr. Analyze business needs, review the technical literature, and write assessment reprts n IT and security applicatins fr the Wrld Bank Infrmatin Slutins Grup (ISG). Help in writing technical dcuments fr Smart Cards and PKI implementatin in develping cuntries. Develp tls t supprt Micrsft Active Directry and Micrsft Certificate Authrity Prvide technical supprt n Windws Certificatin Authrity, and assciated services. Evaluate and test prducts and slutins related t PKI, authenticatin and authrizatin services, smart card technlgy, strng authenticatin (e.g. RSA SecurID), data encryptin, desktp security (e.g. Cisc Security Agent, HIPS), and web security. Design and implement netwrk prtectin slutins and activities such as Firewalls, Threat management and mnitring, Pen Testing, Vulnerability Assessment, netwrk access prtectin slutins based n industry standards, such as 802.1x, Cisc Slutins such as ACS and NAC, and Micrsft Slutins, such as Netwrk Access Prtectin (NAP). Secure Systems Develper/Engineer SETECS Inc, Silver Spring, MD USA. ( ) Design and Develp a middleware and Card Management System fr PIV Smart Cards based n FIPS 201 and related standards. Develp Security Services fr Service Oriented Architectures. 3

4 Develp Plicy based access cntrl and Single Sign On (SSO) systems based n XACML and SAML Standards. Develp cryptgraphic middleware and PKI systems. Netwrk Engineer/Develper CCC Slutins Inc, Washingtn, DC - USA ( ) Sftware and Systems Trainer (HTML, Java Script, Dream Waver, etc). Netwrk and Database Administratr Netwrk Security Engineer Web-Based Systems Develpment ( using HTML, PHP, Java Script, Dream Waver, MYSQL, etc) Research and Teaching Assistant The Gerge Washingtn University, Washingtn, DC USA. Research Assistant Cyber Security Plicy and Research Institute (CSPRI) (SEP 03 05) (Secure Grup Cmmunicatin Systems) Teaching Assistant Department f Cmputer Science (SEP 04 May 2004) (Intrductin t Cryptgraphy) Research Assistant Department f Cmputer Science (FEB 04 AUG 04) (Data Mining imprving dcuments clustering systems) Teaching Assistant Department f Cmputer Science.(SEP 03 DEC 03) (Intrductin t Databases) Research Assistant Department f Cmputer Science.(OCT 02 OCT 03) (Design and Develp a system fr virtual grup cmmunicatins) Teaching Assistant Jrdan University f Science and Technlgy Jrdan (FEB 2001 DEC 2001) SOFTWARE AND PROGRAMMING LANGUAGES BACKGROUND Prgramming languages C, C++, JAVA, Java Script, PHP, ASP, JSP, PLSQL, VB Script, HTML, Dhtml, XUL. 4

5 Platfrms Win9X, Win NT, Win2K, Win2003 Server, Win2008 Server, Win XP Prf, Windws Vista, Windws 7, Linux (Ubuntu, Redhat). Tls & Technlgies Security Related Tls: Nessus, Wireshark, Snrt, Metasplit, Cain and Abel, IBM Ratinal AppScan, Micrsft Active Directry (2003 & 2008), Micrsft Certificate Authrity (2003 & 2008), Micrsft NAP, Cisc NAC, Cisc ACS. Other Tls Micrsft Office 97, 2000, XP, Oracle 8i, SQL, Oracle Develper 2000, Oracle Database Design Tls, Frnt Page, JDBC, MYSQL, XPCOM, Visi, Dream Weaver, Crystal Reprts, Windws SharePint Services, IBM Ltus Ntes, Oracle Cllabratin Suite. AWARDS The Gerge Washingtn University / The Stephen Jel Trachtenberg Cperative Educatin Student Emplyee f the Year Award. The Gerge Washingtn University (2007). Graduate Student Travel Award. Department f Cmputer Science, The Gerge Washingtn University. Graduate study tuitin award (The Gerge Washingtn University) Graduate study tuitin award (Jrdan University f Science and Technlgy) Hnred student award (Yarmuk University) CONFERENCES AND SPEECHES The 8th Internatinal Sympsium n Systems and Infrmatin Security, SaPaul, Brazil, Nvember (SPEAKER) 5

6 The 26th Internatinal Cnference n Cmputer Safety, Reliability and Security, Nuremberg, Germany, September (SPEAKER) IEEE-ICACT2008 (Internatinal Cnference n Advanced Cmmunicatin Technlgy), Phenix Park, Krea, February (SPEAKER) Banking and & Payment Technlgies East Africa (Cards, Mbile, Micrfinance, Sftware), Nairbi, Kenya, February (KEYNOTE SPEAKER) APEC TEL PKI/e-Authenticatin, Taipei, Taiwan. September 2010 (KEYNOTE SPEAKER) E-Crime Wrkshp, Yarmuk University, Irbid, Jrdan. April 2011 (SPEAKER) Infrmatin Systems Security (ISS) Frum, Amman, Jrdan. May 2011 (SPEAKER) CBIT Planning and Implementatin-Training. Arabic accunting and auditing rganizatin- League f Arab States. Jrdan Audit Bureau, Amman, Jrdan. June 2011 (SPEAKER) E-Transactins Frum - Status & Challenges, Amman, Jrdan. Octber 2011 (KEYNOTE SPEAKER) Banking Technlgy Summit, Amman, Jrdan. January 2012 (SPEAKER) COMMITTES & MEMPERSHIPS Natinal Infrmatin Security Cmmittee, MICT. Natinal Smart Card Cmmittee, MICT. Clud Cmputing Technical Cmmittee, JUST. Schl f ICT Cuncil, JUST. Advisr : Micrsft.Net Club and Ggle Club at JUST IEEE, Member 6