Mustafa Alkhayyat

Web Application Security Lead @The National Institutes of Health

Rockville, MD, US

Invicti Netsparker (Cloud/Desktop): full administration of the tool at NIH Core Level including but not limited to run scans (including 2FA, CAPTCHA, OTP enabled authentication), report, false positives validation, agent’s maintenance, custom script, set scan policies and reports, account review, implement Federation logon-Configure Tenable Passive Vulnerability Scanner to obtain an analysis of unknown assets for multiple NIH Institutional Centers (ICs)-Create vulnerability and compliance scan polices to be used by Nessus scanners-Create Tenable.SC dashboards for management that provides a high-level overview of the enterprise that references Most Vulnerable Systems, Top 10 Vulnerabilities and Windows and Linux compliance statuses-Execute Tenable ad-hoc/Agent vulnerability scan and import the report to Tenable SC/IO-Resolve scan issues in a test/development environment before executing tasks on enterprise systems to help minimize impact on the production network-Recommend security configurations and coordinate remediation of critical vulnerabilities identified in internal and external penetration assessments-Analyze the organization\'s cyber defense policies and configurations and evaluating compliance with regulations and organizational directives-Submit logs and PCAP files to Tenable support in case of errors-RedSeal: analyze network and its paths from node to node, including but not limited to, possible threats/vulnerabilities, resilience, availability checks, and reports-Implement AWS Cloud solutions: setup VPC, AZ, EC2 instances, S3 buckets, CloudFront, etc-Create and implement a process to remediate the most vulnerable machines on the network to reduce the number of vulnerabilities, while minimizing business impact-Maintain up-to-date vulnerability profiles, including respective detection and countermeasures-Perform thorough RCA (Root Cause Analysis) and report findings along with the solutions to system owner.

Elm o Sanat

Bachelor of Science (BS), Information Technology