I am a Cybersecurity Engineer specializing in integrating AI with cloud security (AWS) and SOC operations. I build automated security tools that detect and stop threats in real time.
What I deliver:
🔐 AWS Security: IAM least privilege, MFA, 3-tier VPC with Security Groups & NACLs, GuardDuty, CloudTrail
🤖 AI for Security: LLM-based phishing detection, anomaly detection (Isolation Forest)
🚨 SOC Operations: SIEM (Wazuh, Elasticsearch), IDS/IPS (Snort, Suricata), log analysis, threat hunting
⚙️ Automation (SOAR): Python, Lambda, n8n, Docker, GitHub Actions
📍 Based in Beirut, Lebanon | 🌍 Open for Remote Work Worldwide
| Project | Key Focus | Tech Stack | Links |
|---|---|---|---|
| AWS Security Lab : IAM Governance | Complete IAM system with MFA enforcement, least privilege policies, CloudTrail auditing, and SNS alerts. | AWS IAM CloudTrail SNS MFA Least Privilege |
Repo |
| AWS Security Lab : Network Security | Production-ready 3-tier VPC with public/private subnets, Security Groups, NACLs (defense in depth), VPC Flow Logs, and GuardDuty. | AWS VPC Security Groups NACLs GuardDuty Flow Logs |
Repo |
| CloudShield | Zero-trust IAM policy automation for AWS S3, enforcing least privilege. | Python Boto3 AWS IAM Streamlit |
Repo |
| AI-PhishDetect | Zero-shot LLM phishing detection (87.3% accuracy) to identify AI-generated scams. | Python Hugging Face Gradio |
Repo | Demo |
| EDR-Hunter-Pro | AI-powered EDR with real-time anomaly detection (Isolation Forest) & Telegram alerts. | Python Scikit-learn Streamlit Telegram API |
Repo |
| SOC-Sentinel | Complete SIEM lab deployment (Wazuh, Elasticsearch, Kibana) for threat detection. | Wazuh Docker Elasticsearch Kibana |
Repo |
| IDS-Defender | Network Intrusion Detection System (NIDS) using Snort/Suricata on Kali Linux. | Snort Suricata Kali Linux Python |
Repo |
| HEBINT-OSINT | Advanced OSINT tool for usernames, emails, and phones across 150+ platforms (including Arabic sites). | Python Concurrent Futures Colorama |
Repo |
| SOAR-Agent | Security orchestration and automation (SOAR) framework with playbooks and API integration. | Python REST APIs n8n Docker |
Repo |
Cloud Security: AWS (IAM, VPC, Security Groups, NACLs, GuardDuty, CloudTrail, Lambda, SNS, S3) SOC Operations: SIEM (Wazuh, Elasticsearch, Kibana), IDS/IPS (Snort, Suricata), Threat Hunting, Log Analysis Security Automation: Python, Boto3, Lambda, EventBridge, n8n, Docker, GitHub Actions AI/ML Security: LLMs (Hugging Face, Zero-shot Classification), Anomaly Detection (Isolation Forest) OSINT: Phone, Email, Username Investigation, 150+ Platforms, Arabic Platform Support Incident Response: Automated Containment, Forensic Snapshots, SNS Alerts, Playbooks Languages: Arabic (Native), English (Fluent), French (Basic)
Roles: AI Security Engineer, SOC Automation Engineer, Security Researcher Location: Remote (Global) Availability: Immediate