Looking for a job

Karim Abdelkader Belhadj

@karimbelhadj

Cybersecurity Engineer — security monitoring, incident response, and enterprise security solution deployment and management.

Algeria

Message

What I'm looking for

Looking for a remote Cybersecurity Engineer role involving SIEM engineering, detection engineering, SOC analysis, or security solution deployment and management.

Focused on roles where I can build and improve security infrastructure, develop detection logic, respond to real incidents, and deploy and operate enterprise-grade security tools.

I'm a Cybersecurity Engineer based in Algiers, Algeria, with experience spanning SOC engineering, detection engineering, incident response, and enterprise security tool deployment.

At Air Algérie, I'm building the SOC from scratch — deploying and configuring Elastic Stack as the SIEM, integrating log sources, developing detection use cases, and responding to incidents. In parallel, I'm leading the deployment of Zscaler ZPA for Zero Trust Network Access and managing a broad security stack including BeyondTrust PAM, FortiWeb WAF, FortiMail, Rapid7, and Elastic Agent EDR.

Before that, at Beyn (an e-banking solutions company), I deployed Wazuh SIEM from scratch, managed FortiWeb WAF and FortiPAM, conducted a full infrastructure security audit, and — during my Master's thesis — designed and implemented a secure three-tier architecture for hosting e-banking applications, complete with HA, WAF, PAM, SIEM, and encryption layers.

I hold a Master's degree in Cybersecurity from USTHB and certifications including ISC² CC and Elastic Security Analyst. I also teach the CompTIA Security+ curriculum part-time at GoMyCode.

I'm looking for a remote Cybersecurity Engineer role where I can do meaningful work — building, operating, and improving security infrastructure that actually protects organizations in production.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Engineer

Current

Air Algérie

Mar 2025 - May 2026 (1 year 2 months)

Building a SOC from scratch: deploying Elastic Stack SIEM, integrating log sources (Elastic Agent, Syslog, Grok parsing), detection engineering, Kibana dashboards, and incident response. Leading Zscaler ZPA (ZTNA) deployment. Managing BeyondTrust PAM, FortiWeb WAF, FortiMail, Rapid7, Elastic EDR, and Kaspersky.

Elasticsearch Elastic Elastic Security ELK Stack ELK Query Language SIEM Security Operations Kibana ESQL Zscaler Rapid7 Fortinet Incident Response Threat Intelligence Security Engineering

Security+ Instructor

GoMyCode

May 2025 - Dec 2025 (7 months)

Delivered CompTIA Security+ curriculum to groups of 4–6 students (university students and IT professionals), covering all domains: network security, threats & vulnerabilities, identity management, cryptography, and risk management.

Teaching Instructor Security Engineering

Cybersecurity Engineer

BEYN

Oct 2024 - Feb 2025 (4 months)

Deployed and configured Wazuh SIEM from scratch, including log source integrations. Managed enterprise security solutions: FortiWeb WAF, Rapid7, FortiPAM, and FortiEMS ZTNA. Conducted a comprehensive security audit of the company's infrastructure and produced detailed technical documentation.

Wazuh Zero Trust Network Architecture (ZTNA)Rapid7 Nexpose Fortinet

Cybersecurity Master's Internship

BEYN

Jan 2024 - Jul 2024 (6 months)

Designed & deployed a secure 3-tier e-banking architecture (DMZ + isolated VLANs), with HA via HAProxy/Keepalived. Configured FortiWeb WAF (OWASP Top 10, DDoS), FortiPAM for privileged access, Rapid7 for vuln scanning, and Wazuh SIEM across all servers. Enforced SSL/TLS + DB encryption throughout.

Three Tier Architecture VLAN HAProxy Keepalived FortiWeb WAF FortiPAM Wazuh TLS Fortinet Rapid7

Cybersecurity Summer Internship

BEYN

Aug 2023 - Oct 2023 (2 months)

Deployed and configured FortiWeb WAF and FortiPAM PAM solutions and produced project documentation covering end-to-end implementation details.

FortiWeb WAF FortiPAM PAM Web Application Security Privileged Access Management Technical Documentation

Cybersecurity Summer Internship

Fransabank Algeria

Jun 2023 - Jul 2023 (1 month)

Deployed and fully configured Rapid7 Vulnerability Scanner, including site setup, asset configuration, and scanning schedules, and delivered a formal vulnerability report. Documented all project deliverables and findings.

Vulnerability Reports Cybersecurity Documentation Rapid7 Nexpose