Open to opportunities

Ahmad Moghraby

@ahmadmoghraby

Message

Cybersecurity engineer skilled in offensive and defensive security, automation, and incident analysis.

Syrian Arab Republic

Message

What I'm looking for

I seek hands-on security roles (penetration testing, SOC, incident response) where I can apply offensive/defensive skills, learn, and help harden systems.

I am a motivated Cybersecurity Engineer with hands-on experience in offensive and defensive security, system administration on Windows and Linux, network protocol analysis, and scripting to automate security tasks. I bring practical experience from academic projects and freelance instruction that emphasize both attack simulation and mitigation.

My graduation project simulated PC infiltration and exfiltration workflows using PowerShell-Empire and custom PowerShell scripts to demonstrate disabling defenses, creating stealthy persistence, and extracting targeted files; I also delivered recommendations to secure personal devices. In freelance and instructional work I designed courses covering Linux basics, Windows events and registry, network and device scanning, ethical hacking tools, and vulnerability exploitation.

I have conducted internal penetration tests (Windows Active Directory and Vicidial servers), leveraging OSINT, network discovery, PowerShell scripting, and exploitation of weak permissions and directory traversal to access sensitive data. I am committed to continuous learning (SOC Level 1, Google Cybersecurity Professional Certificate, TryHackMe, self-taught OSCP curriculum) and to building resilient, well-defended systems.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Engineer

Current

Freelance

Provided offensive and defensive security services including internal penetration testing, PowerShell-based post-exploitation, and development of courses on OS fundamentals and ethical hacking tools; identified and remediated critical vulnerabilities in servers and network devices.

Penetration Testing PowerShell OSINT Exploit Development Linux Windows Metasploit Nmap

Current

Cybersecurity Instructor

Current

Freelance

Designed and delivered courses on Linux basics, Windows events and registry, network/device scanning, ethical hacking tools, and vulnerability exploitation for learners and practitioners.

Training Development Linux Ethical Hacking

Current

Graduation Project Researcher

Current

University of Aleppo

Simulated attack scenarios targeting personal computers using PowerShell Empire C2, developed custom PowerShell scripts for disabling Defender, creating hidden users, collecting files for exfiltration, and proposed device hardening measures.

PowerShell Malware Simulation Endpoint Evasion Forensics

Internal Penetration Tester

Vicidial Server

Discovered and exploited a critical directory traversal vulnerability and leveraged poor permissions to extract sensitive call data and logs from a Vicidial server, demonstrating advanced post-exploitation and exfiltration techniques.

Directory Traversal PowerShell Network Restrictions Bypass Log Analysis Forensics Vulnerability Assessment

Internal Penetration Tester

Private NAS Engagement

Identified a private NAS and exploited weak folder-sharing permissions to gain unauthorized access to sensitive data and demonstrate remediation strategies.

Share Permissions Exploitation OSINT Data Exfiltration Reporting

Education

Degrees, certifications, and relevant coursework

University of Aleppo

Bachelor of Engineering, Telecommunications Engineering

Pursuing a Bachelor's degree in Telecommunications Engineering with coursework and a graduation project focused on attack simulation, PowerShell-based C2, and device security.