Mohamed Amir Trigui

– Maintained XDR systems to enhance threat detection and response. – Investigated security alerts and took action to mitigate potential threats. – Developed and enforced security policies for a robust security posture. – Conducted vulnerability assessments to identify and remediate security weaknesses. – Installed and managed an open-source SOC, optimizing its performance. – Engineered an automated Threat Hunting lifecycle to accelerate detection and decision-making. – Integrated AI-driven automation into security workflows. – Developed automation scripts.

Implemented Security Orchestration, Automation, and Response (SOAR) workflows: – ELK SIEM, Wazuh EDR, TheHive Incident Response, Cortex Automation enrichment, MISP Threat intelligence, and Shuffle for Orchestration and Automation. – Conducted digital Velociraptor forensics and OSINT frameworks for risk assessment

– Performed web application penetration testing using Burp Suite, identifying vulnerabilities such as SQL injection and XSS, and managing audit reports. – Conducted network forensics with Wireshark, Sguil, Snort, and implemented VPN architecture using OpenVPN.

Developed a dynamic web application utilizing a WAMP server environment. Implemented a secure authentication system and comprehensive CRUD workflows, featuring an interactive dashboard for real-time data visualization.