Hands-on experience in network security monitoring, Active Directory hardening and Python security tooling, built and tested in home-lab environments. Building toward cloud security.
Lab work and tooling, described only as far as the evidence goes. Full evidence sets are available on request.
A firewall, IDS and SIEM pipeline in an isolated VirtualBox lab. Snort on pfSense forwards alerts over Syslog to Wazuh, where a custom decoder and rule (100500) process them. Syslog transport was verified with tcpdump.
Case study in preparation · Evidence on request
A Windows Server 2022 domain with four Group Policy Objects: three apply to the domain client and one is scoped to domain controllers. Covers password policy, PowerShell logging and LDAP signing, with Event 4624 and 4103 telemetry reviewed.
Case study in preparation · Evidence on request
A personal AI platform built as containerised services: Keycloak for identity, PostgreSQL for storage, a NATS bus for audit events, and a policy engine that denies by default. Architecture overview only.
In development · Architecture overview only
A Python framework for testing web applications for Server-Side Request Forgery, built by a small team during a vulnerability-assessment internship. It covers protocol and payload testing, WAF fingerprinting and out-of-band confirmation.
Group project · Repository link when public
Each area below is used in one of the projects above.
pfSense firewall and NAT, Snort IDS deployment, Syslog forwarding, packet analysis with tcpdump and tshark, host firewalling with iptables.
Wazuh deployment, custom decoder and rule development, and troubleshooting log pipelines from source to alert.
Active Directory Domain Services, Group Policy, LDAP signing, PowerShell logging and Windows event analysis.
Python security tooling, PowerShell and Bash, and Docker Compose deployments.
I am a cybersecurity engineer focused on network and infrastructure security. I have built lab environments for network monitoring and Active Directory hardening, and I have more than a year of internship experience across security operations, vulnerability assessment and Python development.
I build reproducible environments and document what I verify, including what I could not verify. Cloud security is where I am headed. I am currently preparing for CompTIA Security+ (in progress).
Languages: Arabic, English, Hindi and Urdu · Relocating to Saudi Arabia.