Haitham Salah Makhlouf is an Information Security Section Head at Telecom Egypt with over 15 years of experience in information security. He has a Master's in Business Administration and a Bachelor's in Computer Science. His areas of expertise include vulnerability assessment, penetration testing, incident handling, SOC analysis, ISO 27001 audits, source code review, and security training. He has led security teams, conducted security audits and assessments, implemented security solutions, and trained developers on secure coding practices.

1. Haitham Salah Makhlouf
Phone: 01119899098
Address: Egypt/Cairo/ Elmarg
Email: haitham.salah.makhlouf @gmail.com
Personal Statement:
Information Security Section Head at Telecom Egypt with wide experience
in information security field in telecommunication sector. Solid working
experience with information security standards/guidelines including PCI-
DSS, ISO 27001, NIST and OWASP accompanied with studying knowledge
of CISSP, CISA and CISM. Extensive experience in enterprise security
solutions, Security Information and Event Management (SIEM), network
and web application penetration test tools.
Education:
 Master’s degree – Business administration
Arab Academy for Science, Technology and Maritime Transport- 2016
 Bachelor's Degree - Computer Science
Cairo University 2004
Areas of Expertise
 Vulnerability Assessment
 Penetration Testing
 Incident handling
 SOC analysis
 ISO 27001 audit
 Source Code Review
 Security training
Experience:
Position: Information Security Section head
Company: Telecom Egypt/WE
 Perform periodic vulnerability assessment to make sure there are no
holes in TE network.

2.  Perform penetration testing for TE/TEDATA /XCEED applications and
train developers on security issues on their code
 Monitor systems, network logs, security logs and flows throw SIEM
solution (Qradar)
 Participate in SIEM fine tuning with other teams
 Investigate IT incidents inside TE group, define root causes and present
lessons learned.
 Enhance IT security policy /processes to prevent information leakage.
 Manage security team members and assign tasks
 Assess current technology architecture for vulnerabilities, weaknesses
and for possible upgrades or improvement
 Serve as a focal point of contact for the information security team and
the customer or organization
 Communicate information security goals and new programs effectively
with other department managers within the organization
 Oversee information security audits, whether by performed by
organization or third-party personnel
 Research the latest information technology security trends.
 Help to design, implement, and maintain the organization’s cyber-
security plan.
 Evaluate department budget and costs associated with technological
training
 Conduct awareness sessions for employees to be aligned with TE IT
policies & procedures.
 Conduct an internal audit to make sure that all employees comply with
internal policies.
 Write & Evaluate RFP with customized features that should be fulfilled
in the solution/product
 Comply IT Network, IT Network Security, Systems, Applications,
Database, files and data elements with ISO 27001
Position: Information Security Engineer
Company: Telecom Egypt
 Prepare penetration test plan for the year
 Communicate with (application / system) admins to carry out
Penetration test

3.  Perform penetration test activities
 Report findings and mitigation for (application/system) admins to close
vulnerabilities
 Make session for (application / system) admins to describe findings
 Perform retest after applying recommendations.
 Perform incident response operations for IT incidents in TE group
Position: IT Technical Support Engineer
Company: Telecom Egypt
 Install Oracle ERP on HR team PCs
 Give required training for new employees on Oracle ERP
 Edit Oracle ERP reports upon HR team requests
 Provide guidance to end users about equipment maintenance practices
and schedules, and troubleshooting.
 Provides support for software, hardware and networking support for
desktops, laptops and servers
Professional Courses:
 Certified Ethical Hacker (C|EH)
 Computer Hacking Forensic Investigator (C|HFI)
 CCNA (Cisco Certified Network Associate).
 CCNA security
 CISM (Certified Information Security Manager)
 CISSP (self-study)
 (OSCP) Offensive Security Certified Professional (self-study)
 IBM Qradar SIEM Fundamentals & Advanced and admin
 F5 Big-IP Application Security Manager (ASM).
 Secure coding “Secure Misr”
 JavaScript, Java, C# and python
 HP UNIX Solaris
Personal Information:
 Date of Birth: 1/11/1982
 Marital status : Married
 Nationality: Egyptian
All Documents available upon request.