Yehya abu Qatrieh

About Yehya abu Qatrieh

Senior Cybersecurity Engineer and Cybersecurity Lead with 9+ years of experience driving enterprise security strategy, team leadership, and global risk reduction initiatives. Proven ability to lead security programs, mentor teams, and align cybersecurity with business objectives across multi-region environments. Expert in building scalable security frameworks, leading incident response, and managing compliance programs (PCI-DSS, NIST).

Experience

1. Senior IT Security Engineer (Cybersecurity Lead)

   3Sixty Duty Free

   Apr 2021 — Present · Miami, FL, US

   Lead and manage cybersecurity operations across global business units (US, UK, Canada, Asia, Africa), ensuring alignment with organizational goals and regulatory requirements Mentor and guide cybersecurity team members, establishing standardized on-off boarding, training, and performance expectations Serve as primary security advisor to leadership, influencing security investments, architecture decisions, and risk acceptance Direct global PCI-DSS compliance program (SAQ-B & SAQ-D), coordinating cross-functional teams to achieve successful audit outcomes Lead deployment of Attack Surface Management (ASM) program, improving visibility and proactive risk management Oversee implementation of WAF policies (Cloudflare & Azure) to mitigate OWASP Top 10 threats at scale Establish and track security KPIs and metrics, reporting progress and risks to executive stakeholders Design security awareness campaigns throughout the year to ensure all employees are educated about new security attacks. Conducted gap analysis to identify deviations from PCI DSS requirements and provided remediation recommendations. Collaborated with cross-functional teams (IT, operations, finance) to implement security controls and maintain compliance. Perform Network and Web Application scanning to address and resolve the vulnerabilities using Tenable.io Review the Firewall Firmware versions and hotfixes to identify the existing vulnerabilities. Monitor the security alerts on the Trellix Endpoint Security Portal and Webroot Console Monitor the email security alerts and analyze email headers on Mimecast and O365 admin center, and Trellix ETP. Analyze memory and disk artifacts using FireEye Redline Create detection rules and IOCs(Indicators of compromise) from threat-hunting campaigns. Configure and install Cisco Meraki Firewall MX64 and Switch MS225 series for the retail sites. Setup Microsoft Azure jumpbox, resource groups, security policies, and load balancer.

Education

• Florida International University - College of Engineering & Computing

  Master of Science - MS, Cyber/Computer Forensics and Counterterrorism

  2017 — 2018