Looking for a job

Mohamed Abdelaal

@mohamedabdelaal1

SOC Manager at CI Capital who built a 24/7 Security Operations Center and deployed an AI-driven defense layer.

At CI Capital Holding, I built the group's Security Operations Center from scratch, defining its operating model, selecting and deploying its tools, and developing the analyst team. I also led the group's ISO/IEC 27001 certification and maintain alignment with Financial Regulatory Authority requirements.

I designed and deployed an AI-driven defense layer across SIEM, EDR, NDR, and email telemetry to enrich, correlate, and pre-classify alerts. I also engineered security-stack integrations and automated recurring SOC work with Python and PowerShell.

Before CI Capital, I led incident response and detection work at EFG Hermes Holding and Banque du Caire, including ISO/IEC 27001 certification at Banque du Caire. At The American University in Cairo, I contributed to building its SOC, including deploying IBM QRadar and developing initial MITRE ATT&CK-aligned use cases.

Experience

Work history, roles, and key accomplishments

Current

SOC Manager

Current

CI Capital Holding

Aug 2025 - Present (1 year 2 months)

Built the group's Security Operations Center from scratch, defined the operating model and service catalogue, and led ISO/IEC 27001 certification end-to-end. Owns SOC strategy, AI-driven defense layer, and vulnerability management.

SOC Management ISO 27001 MITRE ATT&CK SIEM EDR NDR SOAR Python PowerShell REST APIs Vulnerability Management Pentesting Management Executive Reporting

SOC Team Lead & Senior Incident Responder

EFG Hermes Holding

Jan 2024 - Aug 2025 (1 year 7 months)

Served as senior incident responder for a major regional financial group, leading investigations and digital forensics. Developed incident response plans, tuned SIEM use cases, and introduced AI-assisted triage workflows.

Incident Response Digital Forensics SIEM Use Case Development MITRE ATT&CK AI Assisted Triage Python PowerShell API Integration SOC Monitoring SLA Management

SOC Team Lead & Senior Incident Responder

Banque du Caire

May 2022 - Jan 2024 (1 year 8 months)

Acted as shift subject-matter expert and senior incident responder in a 24/7 banking SOC. Led the security operations workstream for ISO/IEC 27001 certification and performed advanced investigations and threat hunting.

Incident Response Digital Forensics Threat Hunting SIEM Use Case Development MITRE ATT&CK Vulnerability Management Patch Management SOC Monitoring SLA Management ISO 27001

SOC Analyst

The American University in Cairo (AUC)

Jul 2021 - May 2022 (10 months)

Worked as part of the core team that built AUC's Security Operations Center from scratch, including deployment of IBM QRadar SIEM. Performed triage, log analysis, threat hunting, and initial incident investigations.

IBM QRadar SIEM Vulnerability Assessment Threat Hunting incident investigation Log Analysis

Information Security Engineer

Ahli United Bank

Jan 2021 - Jul 2021 (6 months)

Performed incident monitoring and response across EDR, SIEM, and file integrity monitoring alerts. Ran vulnerability assessments and supported CBE cybersecurity framework compliance.

EDR SIEM FIM Incident Response Vulnerability Assessment Patch Management CBE Compliance