Ahmed Hegazi

I’m a Cybersecurity Engineer with 4+ years of hands-on experience across penetration testing, SOC Tier 2/3 operations, incident response, and DFIR in government and enterprise environments. I lead authorized web, network, and mobile assessments, validating OWASP Top 10 and PTES vulnerabilities, then translate offensive findings into detection engineering and operational automation.

I act as the SOC escalation point for advanced investigations and threat hunting, leading incident-led DFIR for malware, data leakage, personal device exposure, and third-party vendor incidents. I own end-to-end operations of SentinelOne EDR, Arista NDR, Splunk SIEM, and FortiSOAR, building playbooks for triage and containment and maintaining YARA/Sigma/YAML detection content with IOC lifecycle management and CVE operationalization; I’m also OSCP certified in progress.