Looking for a job

Redha Bouali

@redhabouali

Message

I secure enterprise AI systems and build detections for LLM, cloud, identity, and network threats.

United States

Message

What I'm looking for

I'm looking to secure enterprise AI systems and build detection capabilities across LLM, cloud, identity, network, and container environments. I'm open to relocation.

I've designed secure enterprise AI architectures through Independent Consulting, covering LLM interactions, RAG pipelines, agent orchestration, MCP integrations, and tool execution. I built a Python SOC triage agent with LangGraph and LLM APIs that enriches Microsoft Sentinel alerts while enforcing scoped permissions and analyst approval before device isolation.

Previously at TPx Communications and U.S. Bank, I built and tuned detections, investigated hundreds of security events, and integrated identity, endpoint, network, cloud, and container telemetry across enterprise environments. My background also includes security assessments for military and government environments and network security engineering for Johns Hopkins Health System.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Engineer - AI & LLM Security

Current

Independent Consulting

Jan 2024 - Present (2 years 8 months)

Designed secure architectures for enterprise AI applications, implemented a Python-based SOC triage agent using LangGraph and LLM APIs, and established security controls for MCP integrations. Conducted threat modeling and adversarial testing for LLM, RAG, and agentic systems.

Platform Security Engineer

TPx Communications

Jan 2021 - Dec 2024 (3 years 11 months)

Engineered and operated cloud-delivered security platforms, implemented Zero Trust capabilities using Zscaler, and developed behavioral detections for credential misuse and lateral movement. Performed hundreds of investigations and served as a senior escalation resource.

Zscaler ZIA Zscaler ZPA SSL Inspection Zero Trust Endpoint Security Identity Security Network Security Cloud Security Kubernetes Container Security SIEM Threat Detection Incident Response Telemetry Behavioral Analytics PowerShell Cloud Workload Security

Security Operations Analyst

U.S. Bank

Jan 2019 - Dec 2021 (2 years 11 months)

Investigated security alerts across endpoint, authentication, network, and application environments within a large enterprise SOC. Analyzed authentication anomalies and performed triage and incident analysis using SIEM-driven methodologies.

SIEM Incident Response Threat Intelligence Endpoint Security Authentication Network Security Triage Correlation Security Operations

Security Assessment Specialist

RMC Global

Jan 2017 - Dec 2018 (1 year 11 months)

Performed security assessments across enterprise military and government environments, evaluating architectures, controls, and monitoring capabilities. Identified control gaps and delivered remediation recommendations.

Security Assessments Risk Assessment Control evaluation Monitoring Incident Response Readiness remediation

Network & Security Engineer

Johns Hopkins Health System

Jan 2015 - Dec 2017 (2 years 11 months)

Engineered and maintained enterprise network and security infrastructure supporting a large healthcare environment. Administered routing, switching, firewall, VPN, and network access controls.

Routing Switching Firewalls VPN Network Access Control Security Controls Healthcare Troubleshooting