Yohannes Solomon

Results-driven Cybersecurity and IT Security Specialist with a proven track record in vulnerability assessment, incident management, infrastructure security, and regulatory compliance validation. Experienced in protecting enterprise environments, cloud-based applications (Azure/AWS), networks, and remote workflows. Adept at developing robust security policies, managing endpoint protection, and mitigating complex technical risks while translating them into actionable business strategies for cross-functional team

Information Security Officer at Enat Bank (2025-12 – Present)

• Policy Governance: Developed and enforced enterprise-wide security policies and standards, aligning organizational workflows with ISO 27001 and PCI-DSS frameworks to ensure 100% regulatory compliance.
• Integrated Threat Management: Spearheaded the end-to-end security lifecycle, encompassing proactive threat hunting, real-time detection, and rapid incident response to neutralize external and internal threats.
• Security Architecture & Engineering: Managed and optimized critical security infrastructure, including Firewalls, IDS/IPS, and VPNs, ensuring robust perimeter defense and secure remote access for all bank units.
• Vulnerability & Risk Mitigation: Orchestrated continuous vulnerability management programs and penetration testing cycles; oversaw the prioritized deployment of patches to mitigate high-risk exploits across production environments.
• Strategic Project Leadership: Led cross-functional security initiatives, collaborating with IT and business stakeholders to integrate security objectives into core banking operations and product launches.
• Security Culture: Engineered an organization-wide security awareness program, reducing human-centric risk and improving the bank's overall defensive posture through targeted training and simulations.

Cyber Security Analyst at Awash Bank (2024-07 – 2025-04)

• Lead End-to-End Penetration Testing: Executed comprehensive manual and automated penetration tests across web applications, APIs, and hybrid network architectures, identifying critical flaws using the OWASP Top 10 and PTES frameworks.
• Advanced Exploit Chaining: Successfully demonstrated high-risk attack vectors by chaining multiple "low" and "medium" vulnerabilities (e.g., SSRF to RCE) to prove systemic risk, resulting in a 30% improvement in the organization's overall security posture.
• Vulnerability Lifecycle Management: Spearheaded a proactive vulnerability management program using Nessus/Qualys, reducing the "Mean Time to Remediate" (MTTR) by 40% through automated triaging and direct collaboration with DevOps teams.
• Strategic Risk Communication: Authored detailed technical reports and executive summaries for stakeholders, translating complex exploits into actionable business risks and providing specific remediation code snippets for development team

IT/Cyber Security officer (Remote Part Time) at JSI Inc. (2019-12 – 2021-04)

• Vulnerability Management: Orchestrated routine vulnerability assessments and security audits across enterprise assets, identifying and facilitating the remediation of critical exposures to reduce the corporate attack surface.
• Incident Response & Monitoring: Monitored real-time network traffic and system logs (SIEM), investigating high-priority security alerts and collaborating with cross-functional IT teams to execute incident response plans.
• Security Engineering: Hardened network defenses by maintaining and optimizing firewall configurations, antivirus solutions, and endpoint protection systems to mitigate evolving malware threats.
• Security Awareness: Engineered and delivered security awareness training programs for staff, significantly reducing the success rate of internal phishing simulations and improving the organizational security culture.
• Technical Operations: Streamlined IT support workflows by resolving complex hardware and network issues, ensuring 99.9% uptime for critical business systems and peripherals

BSC. in Computer Science – Admas University (2015 – 2019)