SecOps Engineer | 2 Years Experience | Vulnerability Management, Automation & Red Teaming

1. Summary

I am a hands-on Cybersecurity Engineer specializing in vulnerability intelligence, custom security tooling, and offensive security assessments, with 17 years of cultural fluency in the UAE. Backed by an autonomous track record of engineering in-house platforms and streamlining workflows, I bridge offensive testing findings with practical remediation for enterprise engineering teams. I excel at translating technical risk into clear, business-context priorities for leadership without corporate friction.

2. Core Skills & Expertise

• Vulnerability Management & Intelligence: Nessus, Tenable, Custom Contextual Risk Scoring Models, Scoping & Gap Assessments (PCI-DSS, ISO 27001).
• Offensive Security & Systems Testing: Active Directory Assessments, Kerberoasting, Privilege Escalation Analysis, GPO Auditing, Web-App & Systems Penetration Testing.
• Security Automation & Tooling: Python, PostgreSQL, Bash, n8n Workflows, Make (Integromat), Jira Automation, and LLM-driven Threat Advisory Parsing (Claude API).
• Endpoint & Systems Hardening: Cortex XDR telemetry, Security Hardening across Windows, Linux, and macOS, and Baseline Auditing (CIS Controls, NIST CSF).

3. Work Experience & Achievements

• Engineered Custom Vulnerability Platform: Built an in-house vulnerability intelligence system from scratch using PostgreSQL and Python across 15,000+ assets, replacing generic CVSS with a context-aware scoring model that cut false-positive noise by 60%.
• Built AI Threat Parsing Workflows: Designed 15+ automated production workflows with n8n, Make, and the Claude API to parse 500+ monthly advisories, cutting notification latency from 4 hours down to 15 minutes and eliminating 40+ hours/month of manual documentation.
• Active Directory & Privilege Remediation: Led domain assessments across an 11,000+ user environment, identifying trust flaws, Kerberoasting opportunities, and eliminating 23 critical privilege escalation paths.
• Regulatory Scoping & Stakeholder Reporting: Spearheaded technical scoping, compensating controls documentation, and quarterly vulnerability scanning for enterprise PCI-DSS and ISO 27001 certification audits.

4. What I’m Looking For

I am seeking a Vulnerability Management, Security Assessment, or Purple Team role across the GCC where I can apply my platform engineering and threat automation background to secure large-scale enterprise environments. I am particularly interested in organizations seeking to eliminate vulnerability backlog noise, streamline security operations with automation, and implement proactive risk assessments.