Open to opportunities

MOHAMED KHAIRY MOHAMED ABDELRAOUF

@mohamedkhairymohamed

Message

Cybersecurity Engineer focused on penetration testing, cloud security, SIEM operations, and incident response.

Kuwait

Message

What I'm looking for

I’m looking for a security engineering role where I can combine penetration testing, SOC/SIEM operations, and cloud security (AWS/Azure) with automation (Python/PowerShell, DevSecOps) to reduce risk, improve detection accuracy, and handle incidents end-to-end.

I’m a results-driven Cybersecurity Engineer specializing in penetration testing, vulnerability assessment, and cloud security across AWS/Azure. I’ve built measurable risk reduction through comprehensive security assessments, including DLP implementation and governance risk & compliance (GRC) frameworks.

At BroadBits, I executed testing across 15+ critical infrastructure assets using OWASP/PTES methodologies and tools like Nmap, Burp Suite, Metasploit, and Nessus. I identified and remediated 7 critical vulnerabilities, reducing organizational risk exposure by 30% while aligning to ISO 27001, NIST CSF, PCI-DSS, and GDPR.

I also drive security operations and automation: I resolved 50+ high-priority incidents to 100% SLA compliance, engineered SIEM detection scripts in Python and PowerShell to cut false positives by 40%, and supported change management for zero-downtime deployments across cloud and on-prem environments. Previously, as a SOC Analyst and Team Lead, I supervised an 8-member team, managed Splunk/QRadar/ArcSight monitoring for 10,000+ daily events, and led detection optimization using MITRE ATT&CK—plus hands-on project work integrating Wazuh HIDS, ELK, Grafana, and DLP to reach 95% alert accuracy.

Experience

Work history, roles, and key accomplishments

Cybersecurity Engineer

Kuwait BroadBits

Aug 2023 - Aug 2025 (2 years)

Executed penetration testing and vulnerability assessments across 15+ critical infrastructure assets, remediating 7 critical vulnerabilities and reducing risk exposure by 30% while maintaining compliance with ISO 27001, NIST CSF, PCI-DSS, and GDPR. Resolved 50+ high-priority incidents to meet SLA targets and automated SIEM detections to reduce false positives by 40%.

Penetration Testing Vulnerability Assessment SIEM Administration Incident Response Python PowerShell Change Management ISO 27001 NIST CSF

SOC Analyst and Team Lead

Asia Pacific University

Apr 2023 - Jul 2023 (3 months)

Supervised and mentored an 8-member SOC team, training analysts on MITRE ATT&CK and security best practices while managing enterprise SIEM operations for 10,000+ daily events. Improved detection quality by tuning 20+ correlation rules and supported GRC activities through control assessments, gap analysis, risk register maintenance, and compliance monitoring.