Abdullah A. Email & Phone Number

• Engage in a variety of offensive penetration testing assessments including system/network (internal and external), web application, red and purple team, physical, social engineering, including the development and.
• Hands on experience in penetration testing of Windows and Linux environments, Active Directory, network monitoring, TCP/IP networks, and vulnerability and threat management tools (including network based scanners).
• Hands on experience in MITRE ATT&CK framework/detailed knowledge of global cyber threats, threat actors, and the tactics, techniques, and procedures (TTP’s) used by cyber adversaries, specifically those targeting the.
• Establish and implement hardening security concepts and techniques for Unix/Windows/Linux.
• Coordinating and conducting multiple cloud security audits and identifying, reviewing, prioritizing vulnerabilities and remediation measures based on Azure Security Benchmark and NIST standards.
• Supporting- in SOC/SIEM vendor selection processes and in the creation of strategic concepts for SOC/SIEM operating models.

• Design, development, and evaluation of an open-source IDS, IPS and SIEM in an industrial environment and execution of various tests for multiple clients, ensuring seamless integration with existing security.
• Monitoring and analyzing security events to identify potential threats and breaches.
• Investigating and triaging security incidents to determine their severity and impact.
• Manage and update intrusion detection rules to detect and respond to specific types of suspicious activities.
• Developing and maintaining security incident response processes to effectively respond to security incidents.
• Developing and maintaining security policies, procedures, and standards to ensure compliance with industry regulations and best practices.

• Lead and conduct penetration testing in industry environments to identify potential system/network vulnerabilities and apply appropriate patches across the organization to comply with NIST and ISO 2700x standards.
• Preparation and implementation of a company-wide simulated phishing campaign with evaluation and documentation of the results.
• Conduct and manage regular vulnerability scans across the organization's systems, including both internal and external networks to identify security weaknesses, misconfigurations, and potential threats.
• Review and analyze scan results to prioritize vulnerabilities based on severity and potential impact on the organization.
• Collaborate and work closely with IT teams to apply necessary patches and updates to address identified vulnerabilities.
• Generate and deliver detailed reports to stakeholders, including IT administrators and security teams, outlining identified vulnerabilities and recommended actions.

Bachelor Of Applied Science - Basc, Computer Science

My focus at the university was IT security and software technology. In my studies I successfully completed the following subjects: Core.

Studienkolleg Bochum Focus T, Technical And Mathematical Science

Assessment test for admission to studies at universities in the Federal Republic of Germany.

General Secondary School, Natural Sciences Section, Excellent