Looking for a job

Mohamed Elbaz

@mohamedelbaz

Cybersecurity operations leader at Cyber50 Defense overseeing security audits for 4,000+ regulated entities and leading SOC, DFIR, and threat intelligence.

Egypt

Message

At Cyber50 Defense, I direct cybersecurity audit operations covering VAPT and Red Teaming programs for 4,000+ regulated entities. I also lead SOC, threat intelligence, and incident response activities, and guide enterprise risk assessments and technology audits.

Previously, at Help AG, I led incident response and root cause investigations and engineered 120+ SIEM and XDR detection use cases. I’ve also conducted intelligence-led threat hunting, supported vulnerability management, and contributed to security governance reviews.

Experience

Work history, roles, and key accomplishments

Current

Head of Cybersecurity Operations

Current

Cyber50 Defense

Jun 2025 - Present (1 year 5 months)

Direct cybersecurity audit operations covering VAPT and Red Teaming programs for 4,000+ regulated entities. Lead SOC, threat intelligence, and incident response activities for government and private sector clients.

VAPT Red Teaming SOC Operations Threat Intelligence Incident Response Risk Assessment RFP Solutions Architect Incident Management KPI Reporting Recruitment Mentorship

Senior Security Analyst

Help AG

Jul 2023 - Jun 2025 (1 year 11 months)

Led incident response lifecycle and root cause investigations across multi-entity environments. Engineered 120+ custom SIEM and XDR detection use cases and conducted intelligence-led threat hunting.

Incident Response SIEM XDR Threat Hunting OSINT Penetration Testing KPI Dashboards Security Briefings

Security Analyst

Help AG

Jan 2019 - Jul 2023 (4 years 6 months)

Monitored and correlated security telemetry across SIEM platforms and various log sources. Built EDR, SIEM, and XDR watchlists aligned with MITRE ATT&CK and conducted OSINT-based threat intelligence analysis.

SIEM EDR XDR MITRE ATT&CK OSINT Vulnerability Management Security Governance

SOC Analyst

MNZ Technology Solutions

Dec 2017 - Jan 2019 (1 year 1 month)

Performed 24/7 security monitoring, alert triage, and incident containment in a managed security service provider environment. Assisted with SIEM deployment and client log onboarding.

Security Monitoring Alert Triage Incident Response SIEM PCI DSS