Ahmad El Saoudi

Analyzed compromises on our infrastructure and performed incident response activities to identify source of compromise, compromise perimeter, and provided remediation guides Worked on creating cyber security standards for Docker and Kubernetes environments Created incident response guidelines and procedures for 19 attack types Tested multiple 3rd party security solutions for improving Dark Web telemetry and code security. Provided documentation and recommendations on the solutions.

Monitored NoName057(16) DDoSia application to provide threat intel by creating a C++ application that extracts target list from memory using windows APIs Performed an audit using Cybel’s Tools to uncover critical vulnerabilities on client Infra Managed client requests and investigated Boeing and Sirva leaks on the Dark Web. Created tools to facilitate investigations and scrape dark web Ransomware pages. This scrapped over 3TB of data from the dark web. Wrote threat intel reports on Israel Hamas situation, the construction sector, and NoName057(16)

Worked on analyzing, retesting, and follow-up on vulnerabilities across the Europe Zone. Retests revealed a critical vulnerability and several vulnerabilities. Proposed Solutions and demonstrated POCs for remediating vulnerabilities Researched Payment Card Industry Data Security Standard (PCI-DSS) compliance Researched best implementation of Content-Security-Policy (CSP), bypasses to CSP whitelists, and proposed secure implementations and uses of CSP for PCI-DSS

Full-stack web development internship covering MERN stack.