Rami's CV
Rami Omar
Cybersecurity Analyst
Profile summary
Cybersecurity Analyst with 3 years of experience in GCC, specializing in incident response, threat analysis, and systems security hardening. Track record of containing phishing campaigns, uncovering unauthorized logins, and migrating paper-based records to secured digital systems across regional organizations. Dedicated to maintaining system stability and safeguarding organizational infrastructure through rigorous security operations.
Career highlights
Incident Response Operations: Contained a company-wide phishing campaign within one hour by identifying and blocking the malicious sender, enforcing organization-wide password resets, and remediating affected mailboxes.
System Security Hardening: Uncovered an unauthorized login through Windows Event Log analysis and drove the resulting security hardening, including two-factor authentication for management and sensitive departments.
Infrastructure Migration: Delivered a three-month migration of a paper-based organization to a secured digital backup system covering employee records, administrative departments, and payroll.
Workstation Reliability: Cut recurring workstation and system outages from 8 to 9 per month down to 3 to 4 by scheduling preventive maintenance and managing system security configurations.
Key skills
Professional experience
Directed information security and IT operations, overseeing endpoint protection, user access provisioning, and system administration. Managed technical support delivery and security hardening initiatives for the organization.
- Contained a company-wide phishing campaign within one hour by identifying and blocking the malicious sender, enforcing password resets, and remediating affected mailboxes with zero recurrence.
- Uncovered an unauthorized login through Windows Event Log analysis and executed security hardening, adding two-factor authentication for sensitive departments and a password-rotation policy.
- Delivered a three-month migration of a paper-based organization to a secured digital backup system covering employee records, administrative departments, and payroll to eliminate single-copy paper risk.
- Administered and secured user accounts for 50 employees, covering access provisioning, permissions, and encryption while maintaining endpoint protection and patching across 12 workstations, servers, and printers.
Managed workstation and shared-system security configurations, updates, and backups while coordinating IT hardware and software troubleshooting. Oversaw maintenance schedules and documentation processes to support employee security awareness and system stability.
- Reduced recurring workstation and system outages from 8 to 9 per month down to 3 to 4, maintaining zero outages in several months by scheduling preventive maintenance.
- Hardened workstation security through secure configuration, updates, and backups while supporting IT upgrades and documenting recurring technical issues.
Projects
Built an end-to-end SOC workflow across 6 stages (detection, case management, enrichment, backup validation, restore testing, and forensic review) in an isolated virtual environment. Configured Wazuh (SIEM/XDR) with File Integrity Monitoring to detect file creation, modification, and deletion on a monitored Linux endpoint in real time, documenting incidents as TheHive cases and enriching observables through Cortex analyzers. Delivered DFIR evidence indexing and reporting using Autopsy, validating backup integrity with SHA-256 and safe restore testing. Stack: Wazuh, TheHive, Cortex, Docker Compose, Autopsy, Kali Linux.
Wazuh TheHive Cortex Docker Compose Autopsy Kali Linuxgithub.com/RootSec01/SOC-ProjectDeveloped a full-stack OSINT and attack-surface analysis platform supporting 5 target types (IP, Domain, CIDR, ASN, Organization) with a security-first, non-destructive, authorization-gated design; awarded a distinction grade as a university capstone project. Integrated 4+ intelligence sources (Shodan, Censys, NVD/CVE, threat-intel feeds) into a correlation engine that maps services to CVEs, assigns CVSS scores, and produces a prioritized Top-10 vulnerability list. Implemented evidence-based run archiving using structured JSON artifacts and per-run reporting for reproducibility and audit trails, plus optional lab-only verification (Nmap service detection, OWASP ZAP passive analysis). Stack: Python, FastAPI, Shodan API, Censys API, NVD, OWASP ZAP, Nmap.
Python FastAPI Shodan API Censys API NVD OWASP ZAP Nmapgithub.com/RootSec01/project-osintEducation
Information Security
- GPA: 3.60 / 4.0
- Relevant coursework: Information Systems Security, Ethical Hacking & Network Defense, Digital Forensics & Investigation, Principles of Networking.
- Academic projects: Cyber OSINT Investigation and digital forensic analysis using Autopsy.
Certifications
Languages
Arabic · Native
English · Fluent