10/10/2026 updated

**** ******** ****
100 % available

Security Engineer | SOC & Managed Security Services | Cloud & Network Security | Incident Response

Egypt
Worldwide
B.Sc. Computer Science - Networks & Cybersecurity, Cairo University (GPA 3.62 / 4.0, Top 5%)
Egypt
Worldwide
B.Sc. Computer Science - Networks & Cybersecurity, Cairo University (GPA 3.62 / 4.0, Top 5%)

Profile attachments

Saif_Aboalnaga_CV_Ansen.pdf

Certificate of Cloud Security KnowledgeCloud Computing
Security Operations & Incident Response
Expertise in Security Event & Log Analysis, SIEM Monitoring, Threat Hunting, Incident Response, DFIR & Memory Forensics, using tools such as Wireshark, EnCase, and FTK.

Vulnerability Management & Offensive Security
Proficiency with Nessus, Nuclei, Nmap, Burp Suite, Metasploit, BloodHound, Active Directory Exploitation, and CVSS-Based Reporting for comprehensive vulnerability assessments and penetration testing.

Cloud & Infrastructure
Hands-on experience with AWS (EC2, S3, IAM, VPC), Docker, Kubernetes, Ansible, Jenkins, and Git/CI-CD for cloud security and infrastructure management.

Network & Security Technologies
Strong knowledge of TCP/IP, OSPF, BGP, VLANs, Firewalls, VPNs, IDS/IPS, WAF, Windows, and Linux environments.

Automation & Frameworks
Application of Python Security Tooling, REST APIs, MITRE ATT&CK, CVSS 3.1, ISO 27001, NIST CSF, and PCI-DSS frameworks for security automation and compliance.

Service Delivery & GRC
Experience in Customer Onboarding, Tool Configuration & Health Checks, Troubleshooting, Technical Documentation, Risk Registers, Security Policies, and Internal Audits.

Digital Forensics & Incident Response (DFIR)
Completion of intensive DFIR training covering memory forensics, log analysis, and structured threat-hunting workflows using industry-standard tooling.

ISO 27001 / NIST CSF Compliance
Performance of gap analyses, mapping weaknesses to remediation controls, preparation of risk registers, and support of mock internal audits across security domains.

Python Security Tooling
Development of Python-based tools for SQLi/XSS payload detection, iteratively tested to high accuracy with zero false positives.

Experience

Professional experience0 - 5 years
Freelancer since2024

Languages

EnglishFluent

Project history

Security Engineer

Ansen Technology
Supporting managed-security service delivery with SOC teams and customers, including security-tool configuration, health checks, incident analysis, and troubleshooting. Assisting with customer onboarding and security-tool integration, including configuration and customer-specific policies and detection rules. Working with SOC analysts on alert review, incident containment and remediation, and detection/response workflow improvements. Documenting configurations and troubleshooting guidance, and communicating service status and technical recommendations to customers against agreed SLAs.

Cloud Security Trainee

Digital Egypt Pioneers Initiative (DEPI)
Pursuing DEPI's AWS Security Cloud Computing track (Cloud Practitioner, Architecting on AWS, Security Essentials, Security Engineering on AWS) with hands-on labs in IAM, monitoring, incident response, and compliance.

DevOps Engineering Bootcamp

Linux Plus
Completed an intensive hands-on bootcamp in containerization, orchestration, configuration management, and CI/CD using Docker, Kubernetes, Ansible, Git, and Jenkins.

Graduation Project - PentestPilot AI-Assisted Penetration Testing Management Platform

Cairo University
Led a 4-person Agile team to architect and deploy a full-lifecycle pentest platform using a serverless React 18/TypeScript SPA on Supabase, enforcing authorization via database-level Row-Level Security. Engineered a Docker-based scanning pipeline orchestrating 7 security tools into a Redis-backed, deduplicated IOC event stream. Integrated a configurable AI layer featuring 15 AI-assisted modes with custom prompt-injection defenses and a spec-verified CVSS 3.1 calculator. Developed a comprehensive reporting engine featuring versioning, MITRE ATT&CK mapping, an AES-256-GCM encrypted credential vault, and multi-format exports.

GRC Intern

Spark Professional Services
Performed ISO 27001 / NIST CSF gap analyses, mapped weaknesses to remediation controls, prepared risk registers, and supported mock internal audits across security domains.

GRC Trainee

We Innovate / ZeroSploit
Developed ISO 27001 documentation packages including SoA, risk treatment plans, and security policies; gained applied proficiency in IAM, Cloud Security, and Security Architecture.

Huawei HCIA-Security Instructor (Part-Time)

Cairo University
Designed and delivered technical instruction on firewalls, VPNs, and IPS; supported learners during live configuration labs.

Vulnerability Analyst / Pentester Trainee

Digital Egypt Pioneers Initiative (DEPI)
Performed web and network penetration tests, delivering CVSS-prioritized remediation reports; built Python tooling for SQLi/XSS payload detection, iteratively tested to high accuracy with zero false positives.

Digital Forensics & Incident Response Bootcamp

ITI / CyberTalents
Completed intensive DFIR training covering memory forensics, log analysis, and structured threat-hunting workflows using industry-standard tooling.

Infrastructure Penetration Testing Bootcamp

We Innovate / ZeroSploit
Conducted end-to-end infrastructure pentests, from network reconnaissance through Active Directory exploitation and privilege escalation, using BloodHound, Mimikatz, and Nessus.

Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in