• Designed secure front-end components to prevent data exposure and client-side manipulation.
• Performed security testing on authentication, authorization, and business logic workflows.
• Mitigated risks related to bypassing in-app communication and transactions.
• Tested API endpoints for access control and input validation.
• Collaborated with developers to implement secure design patterns and retest fixes.

Key Technologies: Web Application Security, Secure Front-End Development, API Security Testing, Authentication & Authorization, Business Logic Security

• Performed manual security QA testing on authentication workflows.
• Discovered a critical authentication bypass via URL manipulation.
• Documented vulnerabilities with clear reproduction steps.
• Verified fixes and retested controls after remediation.

Key Technologies: Web Application Security Testing, Authentication & Authorization, Manual QA Testing, Vulnerability Analysis

Security QA Team Collaboration

Collaborative security testing focused on identifying real-world vulnerabilities and validating fixes.

• Implemented firewalls, IDS/IPS, and automated backup solutions.
• Reduced vulnerabilities by 20% through continuous monitoring.
• Applied encryption and secure network architecture.
• Ensured ISO 27001 compliance.

Key Technologies: Firewall Configuration, IDS/IPS, Network Security Monitoring, Data Encryption, Backup & Disaster Recovery, ISO 27001

Project Highlights

Secure IT infrastructure deployment supporting UNDP operations and compliance goals.

• Developed a scalable cloud infrastructure using AWS, Azure, and Oracle Cloud, optimizing resources for efficiency and cost-effectiveness.
• Designed and implemented advanced threat detection and prevention solutions, maintaining high security standards and protecting user data.
• Led performance monitoring and optimization initiatives, ensuring fast, reliable connections with low latency.
• Collaborated with the team to troubleshoot and resolve technical issues, ensuring consistent, high-quality service delivery.

Key Technologies: VPN Architecture, Network Encryption (TLS/IPSec/WireGuard concepts), Firewall Policy Management, Cloud Infrastructure (AWS/Azure/Oracle), Traffic Optimization, Threat Detection & Prevention

AToZ VPN Service Launch

Launched AToZ VPN, focusing on cybersecurity, cloud security, and user trust.

• Configured Mikrotik routers to enhance network performance and ensure secure connectivity across multiple locations.
• Maintained Active Directory and email server systems, supporting consistent and secure access for all staff members.
• Deployed security cameras and supported inventory management, contributing to a secure and efficient working environment.
• Ensured system resilience through effective maintenance, optimizing infrastructure for peak performance.

Key Technologies: Mikrotik Routers, Network Administration, Active Directory, Email Servers, CCTV Systems, IT Infrastructure Support, Network Performance Optimization

ICT Team Collaboration

Standing with the ICT team at Qameh Group, a group of dedicated professionals who worked tirelessly to ensure seamless operations. Together, we managed critical IT infrastructure and achieved significant milestones.

En Route to the Project Site

Heading to the project site with the ICT team at Qameh Group. Wearing safety gear, I contributed to IT infrastructure management, network security, and system deployment while ensuring secure and efficient operations.

A Final Moment with the ICT Team

A memorable and heartfelt moment captured with the ICT team at Qameh Group. This image reflects our collaborative spirit and professional camaraderie while managing IT infrastructure and network security across multiple branches.

A Kind and Simple Breakfast

Enjoying a kind and simple breakfast with my colleagues. This moment reflects the spirit of collaboration and teamwork within the ICT team at Qameh Group, reinforcing our bonds while managing complex projects together.

• Implemented and managed antivirus solutions across systems to prevent cyber threats, conducting regular scans and system checks to maintain data security.
• Established data backup and recovery protocols, ensuring minimal data loss and effective restoration capabilities aligned with best practices.
• Secured the organization's infrastructure in compliance with ISO 27001, reinforcing cybersecurity measures and protecting sensitive information.
• Served as the on-call IT specialist, responding swiftly to IT issues and cybersecurity incidents, maintaining operational security.

Key Technologies: Endpoint Security (Antivirus), Backup & Recovery Systems, ISO 27001 Controls, Incident Response Support, System Hardening, Secure IT Operations

On-Site IT Security Implementation

In this photo, I’m on-site at the Military Construction Implementation Establishment (Mataa), representing my role as an IT Security & Systems Support Specialist. This image reflects my commitment to providing high-quality cybersecurity and IT solutions, ensuring a secure, compliant, and resilient IT environment across all systems.

On-Site Technical Issue Resolution

Captured during active work hours while diagnosing and resolving real-time technical issues on-site. This moment reflects hands-on system troubleshooting, operational focus, and commitment to maintaining secure and stable IT operations in a demanding work environment.

• Established a culture of innovation and collaboration, driving success in cybersecurity projects and cloud security deployments.
• Spearheaded cybersecurity services including threat detection, vulnerability assessments, and custom incident response solutions.
• Directed cloud deployment and recovery initiatives, providing 24/7 technical support for uninterrupted client operations.
• Led digital marketing strategies focused on SEO, social media, and content creation, enhancing brand visibility and client engagement.
• Provided strategic consulting in cybersecurity and IT, helping clients align technology investments with business objectives.

Key Technologies: Cybersecurity Consulting, Vulnerability Assessment, Incident Response Planning, Cloud Security, Secure Architecture Design, Digital Risk Management

Progify Team Meeting

This image captures a collaborative team meeting at Progify, highlighting our dedication to delivering secure, strategic technology solutions for our clients.

Progify & Dinova Partnership

This image celebrates the strategic partnership between Progify and Dinova, showcasing a unified effort to drive innovation in cybersecurity and IT solutions. Together, we aim to enhance digital resilience and deliver cutting-edge services to our clients.

• Installed antivirus software and Deep Freeze solutions to safeguard critical systems from malware, ensuring endpoints remained secure and operational.
• Managed finance and accounting system security, maintaining compliance and protecting sensitive financial data through secure connections to central servers.
• Provided immediate on-site technical support to resolve urgent issues, ensuring smooth daily operations and minimizing downtime.
• Advised on device procurement and optimization, supporting effective integration and enhancing overall operational efficiency.
• Maintained secure server connections and network access controls, safeguarding data integrity and reliability across the IT infrastructure.

Key Technologies: Endpoint Protection (Antivirus), Deep Freeze, Secure Remote Access, Access Control, POS & Retail IT Systems, Backup & Recovery, Network Troubleshooting

Technology-Driven Retail Operations

Ensured the security and reliability of IT systems by implementing advanced cybersecurity measures, managing secure connections, and delivering prompt technical support to maintain seamless operations.

• Conducted penetration testing on VPC servers, Windows Server 2022, and Supabase applications to uncover vulnerabilities and improve security defenses.
• Implemented security protocols for Docker containers and configured AWS S3 automated backups, ensuring continuous data protection.
• Designed a dedicated virtual machine for ongoing security testing, enhancing proactive threat detection and reducing vulnerabilities by 30%.
• Collaborated with teams to refine security protocols and bolster defenses against evolving cyber threats.

Key Technologies: Web Penetration Testing, VPC Security, Windows Server 2022 Hardening, Docker Security, AWS S3 Backups, Supabase Security, Vulnerability Management

Protecting Mademoiselle Application from Cyber Threats

This image represents the Mademoiselle login page, which was a key aspect of our cybersecurity protection efforts. As part of our security operations, I worked to secure application-level vulnerabilities, ensuring that the login process was protected against potential attacks and unauthorized access.

• Optimized local network configurations to support secure document sharing, ensuring data privacy and enhanced collaboration.
• Resolved critical printer and scanning issues, providing secure and efficient access for multiple users.
• Reduced network downtime by 10% through proactive maintenance and strategic technical support.

Key Technologies: Network Security, Local Area Networks (LAN), Secure File Sharing, Access Control, Network Troubleshooting, IT Support & Maintenance

• Developed a Raspberry Pi-based cooling system, integrating security protocols to protect hardware and optimize operational efficiency.
• Collaborated on defining project requirements and implemented solutions that increased automation and minimized manual intervention.
• Showcased proficiency in hardware security and system monitoring to ensure resilient and secure cooling operations.

Key Technologies: Raspberry Pi, Linux, Python Automation, IoT System Monitoring, Secure Device Configuration, Hardware–Software Integration

Automated Cooling System

Developed an automated cooling system utilizing Raspberry Pi, incorporating cybersecurity protocols to ensure system reliability, operational efficiency, and enhanced resilience.

• Designed and implemented a secure cloud infrastructure that supported remote access for a globally distributed team.
• Achieved 100% uptime by monitoring and managing cloud environments to ensure uninterrupted operations.
• Streamlined cloud connectivity processes, enabling seamless collaboration across countries and enhancing digital marketing operations.
• Improved system security through the application of Virtual Private Cloud (VPC) configurations and advanced encryption techniques.

Key Technologies: Cloud Infrastructure, VPC Design, Secure Remote Access, Uptime Monitoring, Encryption, Cloud Connectivity Optimization, Remote Team Enablement

• Reduced incident response time by 35% through the implementation of faster threat containment strategies.
• Improved SIEM rule accuracy by 25%, significantly reducing false positives and enhancing overall detection capabilities.
• Collaborated with Red, Blue, and Purple Teams to identify vulnerabilities and strengthen organizational defenses.
• Conducted advanced threat analysis and implemented security measures to ensure resilience against evolving threats.

Key Technologies: SIEM Monitoring & Tuning, Threat Detection, Incident Response, Alert Triage, Threat Analysis, MITRE ATT&CK Concepts, SOC Operations

SOC Knowledge Sharing Session

Captured during a collaborative knowledge-sharing session at DefendLab, where I was actively explaining Active Directory concepts and core Windows Server services to the SOC team. This moment reflects hands-on technical collaboration, peer learning, and the exchange of practical security and infrastructure knowledge within a professional SOC environment.

Team Collaboration Event

Captured during team activities to foster collaboration, knowledge sharing, and team synergy in a professional setting.

Team Meeting at DefendLab

Captured during a team discussion, focusing on strategies and threat detection approaches to enhance organizational cybersecurity defenses.

Team Coordination & Field Operations

Captured during a work-related journey, reflecting strong team cohesion, continuous collaboration, and the professional relationships built while coordinating security operations and project responsibilities beyond the office environment.

Remote SOC Team Coordination

Captured during a live Teams meeting, reflecting the demanding nature of SOC work long hours, focused collaboration, and visible fatigue balanced by genuine passion and satisfaction in cybersecurity operations.

• Developed the OFBiz finance system, integrating cybersecurity measures for Linux and Windows platforms to ensure secure transactions.
• Led the project lifecycle from planning to deployment, ensuring timely delivery while adhering to security and functional requirements.
• Implemented cross-platform integration to enhance operational efficiency and maintain high standards of security compliance.

Key Technologies: Secure Software Development, Web Security Testing, Vulnerability Assessment, Database Security, Linux/Windows Deployment, Security Integration

OFBiz Finance System

Developed and launched a comprehensive OFBiz finance system, showcasing expertise in integrating cybersecurity protocols across platforms for enhanced business security and operational efficiency.

• Executed in-depth penetration tests on web applications, networks, and databases using tools like Metasploit, Burp Suite, and Nmap.
• Identified and mitigated critical vulnerabilities, reducing overall risks by 30% and ensuring compliance with industry standards.
• Collaborated with cross-functional teams to deliver actionable recommendations and enhance cybersecurity frameworks.

Key Technologies: Web App Penetration Testing, Network Penetration Testing, Burp Suite, Metasploit, Nmap, Vulnerability Reporting, Risk Mitigation

Verified Expertise

This official experience letter from New Horizons Computer Learning Centers confirms my role as a Penetration Testing Specialist, underscoring my impactful contributions to improving IT security frameworks and vulnerability management processes.

Reflecting on a Fulfilling Journey

Marking the conclusion of my tenure at New Horizons, this moment highlights the milestones achieved in penetration testing, IT support, and training roles. It represents a legacy of strengthened cybersecurity systems and empowered learners.

• Reduced system downtime by implementing proactive monitoring and troubleshooting protocols, resulting in a 20% improvement in operational efficiency.
• Developed and maintained system stability through scheduled maintenance and the implementation of security measures.
• Provided user support and training on cybersecurity best practices to enhance security awareness and compliance.

Key Technologies: IT Troubleshooting, System Monitoring, Endpoint Support, Windows OS, Preventive Maintenance, User Training, Basic Cybersecurity Practices

IT Support in Action

This image captures a moment from my time as an IT Support Specialist at New Horizons, where I provided technical troubleshooting, proactive maintenance, and security support. Focused and engaged, I worked on optimizing system performance and implementing security protocols. My role involved reducing system downtime, supporting cybersecurity practices, and enhancing end-user support, reflecting my dedication to creating a stable and secure IT environment.

Collaboration & Team Spirit at New Horizons

A meaningful moment captured with my colleague, Mr. Salah, on one of our final working days at New Horizons Computer Learning Centers. This image reflects the strong professional relationship, mutual respect, and teamwork we shared while collaborating on multiple technical and operational projects. Our cooperation and understanding played a key role in delivering successful outcomes and maintaining a positive, productive work environment.

• Developed high-quality documentation covering various formats, enhancing user understanding of library materials.
• Engaged in frequent discussions with the content owner to refine book content, ensuring factual accuracy and relevancy.

Key Technologies: Technical Documentation, User Manuals, Knowledge Base Writing, Content Structuring, Technical Communication, Documentation Standards