Curriculum Vitae
Academic background, technical competencies, operational background, and credentials.
Professional Profile
Researcher focusing on Systems & AI Security, backed by 6+ years of hands-on operational experience across enterprise networking, infrastructure isolation, and defensive fundamentals.
My technical focus centers on analyzing AI threat surfaces, ML model evasion/robustness, deep packet inspection (DPI), behavioral telemetry, and engineering practical proof-of-concept tooling from emerging security literature.
Professional Experience
Systems & Network Infrastructure Engineering
6+ Years- Practical engineering across enterprise networks, server environments, and production systems.
- Hands-on routing, switching, infrastructure isolation, VLAN segmentation, and administration.
- Network traffic analysis, perimeter defense enforcement, and enterprise attack surface reduction.
- Transitioned core operational infrastructure foundations into applied security research.
Technical Competencies & Toolset
Offensive Security & Practical Assessment
- Network & Host: Nmap, Metasploit, traffic pivoting/forwarding (Chisel, SSH tunneling), privilege escalation vectors.
- Active Directory: BloodHound, Impacket suite, Kerbrute, Mimikatz, Kerberoasting, AS-REP Roasting, Pass-the-Hash/Ticket.
- Web Application Testing: Assessing injection flaws (SQLi, Command Injection), auth & session handling, file uploads, traversal (LFI/RFI), and misconfigurations.
- PoC Execution: Reviewing, customizing, and executing public proof-of-concept exploits safely within isolated scopes.
- Security Reporting: Structured penetration testing documentation, translating exploit chains into risk impact and remediation.
Network Engineering & Telemetry
- Infrastructure & Routing: Cisco IOS, enterprise switching, VLAN segmentation, ACL enforcement, NAT, TCP/IP stack internals (L2–L7).
- Protocol Analysis: Deep Packet Inspection (DPI), Wireshark, TShark, TCPDump, flow telemetry extraction (NetFlow/IPFIX).
AI Security & Applied Frameworks
- Adversarial Evaluation: OWASP Top 10 for LLMs, prompt injection, evasion attacks, data poisoning, and model inference verification.
- Applied Tooling: PyTorch, Scikit-learn, Pandas, NumPy (focused on telemetry feature extraction and defensive evaluation workflows).
Systems, Scripting & Governance
- Operating Environments: Linux administration (Debian, Ubuntu, Kali), Windows Enterprise / Server, virtualization platforms.
- Scripting: Python (code comprehension, PoC adaptation, automation), Bash / POSIX Shell.
- Foundational GRC: Mapping technical findings to risk impact, baseline security frameworks, and defensive mitigation planning.
Education
Bachelor of Science in Information Technology and Computing
Expected 2027Networking & Security Track — Arab Open University (Validated by Open University, UK)
Associate Diploma in Cybersecurity
42 Credit HoursTuwaiq Academy
Associate Degree in Computer Networks
RiyadhCollege of Telecom and Information (CTI)
Certifications
eCPPTv3
Certified Professional Penetration Tester
eJPTv2
Junior Penetration Tester
CCNA Curriculum Series (ITN, SRWE, ENSA)
Enterprise Networking, Security, and Automation
HTB Certified Offensive AI Expert
Hack The Box