RAMI's CV
RAMI OMAR
Cybersecurity Analyst
Profile summary
Information Security graduate from the University of Dubai (GPA: 3.60/4.0) with practical security experience across real-world incidents and hands-on SOC and DFIR projects. Experienced in incident response, phishing mitigation, account and access security, endpoint protection, and Windows Event Log analysis, supported by a three-year foundation in IT support and systems administration. Built an end-to-end SOC/DFIR home lab using Wazuh, TheHive, Cortex, and Autopsy, and developed a FastAPI-based OSINT intelligence platform. Completed professional training from IBM, Google, and AWS in incident response, digital forensics, threats and vulnerabilities, and cloud fundamentals. Seeking an entry-level SOC, DFIR, or Information Security Analyst role.
Key skills
Professional experience
- Assisted in incident response for a company-wide phishing/spam campaign, identifying and blocking the malicious sender, enforcing organization-wide password resets, and remediating affected mailboxes.
- Investigated a suspected unauthorized-access incident by analyzing Windows Event Logs, tracing authentication events and account activity to verify the reported unauthorized activity.
- Administered and secured employee accounts and core systems, including access provisioning, permissions, encryption, and endpoint protection to safeguard organizational data.
- Applied patching, regular backups, and routine security checks to support system availability and recoverability.
- Managed and maintained IT infrastructure (workstations, networks, and core systems) and provided first- and second-line technical support to end users.
- Troubleshot hardware, software, and network-related issues, reducing recurring workstation downtime through preventive maintenance and faster issue handling.
- Assisted with secure system configuration, updates, and backups across workstations and shared systems as part of routine maintenance.
- Supported implementation of cybersecurity measures to protect sensitive organizational data, and contributed to IT upgrades, infrastructure support, issue documentation, and employee security-awareness efforts.
- Assisted in incident response for a company-wide phishing/spam campaign, identifying and blocking the malicious sender, enforcing organization-wide password resets, and remediating affected mailboxes.
- Investigated a suspected unauthorized-access incident by analyzing Windows Event Logs, tracing authentication events and account activity to verify the reported unauthorized activity.
- Administered and secured employee accounts and core systems, including access provisioning, permissions, encryption, and endpoint protection to safeguard organizational data.
- Applied patching, regular backups, and routine security checks to support system availability and recoverability.
- Managed and maintained IT infrastructure (workstations, networks, and core systems) and provided first- and second- line technical support to end users.
- Troubleshot hardware, software, and network-related issues, reducing recurring workstation downtime through preventive maintenance and faster issue handling.
- Assisted with secure system configuration, updates, and backups across workstations and shared systems as part of routine maintenance.
- Supported implementation of cybersecurity measures to protect sensitive organizational data, and contributed to IT upgrades, infrastructure support, issue documentation, and employee security-awareness efforts. SECURITY PROJECTS Integrated SOC & DFIR Home Lab (Wazuh, TheHive, Cortex, Autopsy) github.com/RootSec01/SOC-Project
- Built an end-to-end SOC workflow across 6 stages (detection, case management, enrichment, backup validation, restore testing, and forensic review) in an isolated virtual environment.
- Configured Wazuh (SIEM/XDR) with File Integrity Monitoring to detect 3 event types (file creation, modification, and deletion) on a monitored Linux endpoint in real time.
- Documented incidents as TheHive cases, executed observable enrichment through Cortex analyzers, and validated backup integrity using SHA-256 with safe restore testing.
- Conducted DFIR evidence indexing and reporting using Autopsy, integrating Wazuh, TheHive, Cortex, Docker Compose, Autopsy, and Kali Linux into one documented SOC/DFIR workflow with an evidence gallery and recovery validation.
- Stack: Wazuh, TheHive, Cortex, Docker Compose, Autopsy, Kali Linux. CyberOSINT Intelligence Platform (Python / FastAPI) github.com/RootSec01/project-osint
- Developed a full-stack OSINT and attack-surface analysis platform supporting 5 target types (IP, Domain, CIDR, ASN, Organization) with a security-first, non-destructive, authorization-gated design.
- Integrated 4+ intelligence sources (Shodan, Censys, NVD/CVE, threat-intel feeds) into a correlation engine that maps services to CVEs, assigns CVSS scores, and produces a prioritized Top-10 vulnerability list.
- Implemented evidence-based run archiving using structured JSON artifacts and per-run reporting to support reproducibility and audit trails, plus optional lab-only verification (Nmap service detection, OWASP ZAP passive analysis).
- Stack: Python, FastAPI, Shodan API, Censys API, NVD, OWASP ZAP, Nmap. CERTIFICATES & PROFESSIONAL TRAINING
- Incident Response and Digital Forensics — IBM (2025)
- Assets, Threats, and Vulnerabilities — Google (2025)
- Database Essentials and Vulnerabilities — IBM (2025)
- Introduction to Information Technology and AWS Cloud — Amazon Web Services (2025)
- Python for Data Science, AI & Development — IBM (2025)
- Project Lifecycle, Information Sharing, and Risk Management — SkillUp (2025)
Projects
Built an end-to-end SOC workflow across 6 stages (detection, case management, enrichment, backup validation, restore testing, and forensic review) in an isolated virtual environment. Configured Wazuh (SIEM/XDR) with File Integrity Monitoring to detect 3 event types (file creation, modification, and deletion) on a monitored Linux endpoint in real time. Documented incidents as TheHive cases, executed observable enrichment through Cortex analyzers, and validated backup integrity using SHA-256 with safe restore testing. Conducted DFIR evidence indexing and reporting using Autopsy, integrating Wazuh, TheHive, Cortex, Docker Compose, Autopsy, and Kali Linux into one documented SOC/DFIR workflow with an evidence gallery and recovery validation.
Wazuh TheHive Cortex Docker Compose Autopsy Kali Linuxgithub.com/RootSec01/SOC-ProjectDeveloped a full-stack OSINT and attack-surface analysis platform supporting 5 target types (IP, Domain, CIDR, ASN, Organization) with a security-first, non-destructive, authorization-gated design. Integrated 4+ intelligence sources (Shodan, Censys, NVD/CVE, threat-intel feeds) into a correlation engine that maps services to CVEs, assigns CVSS scores, and produces a prioritized Top-10 vulnerability list. Implemented evidence-based run archiving using structured JSON artifacts and per-run reporting to support reproducibility and audit trails, plus optional lab-only verification (Nmap service detection, OWASP ZAP passive analysis).
Python FastAPI Shodan API Censys API NVD OWASP ZAP Nmapgithub.com/RootSec01/project-osintEducation
3.60 / 4.0 | Relevant coursework: Information Systems Security, Ethical Hacking & Network Defense, Digital Forensics & Investigation, Principles of Networking. Academic projects: Cyber OSINT Investigation and digital forensic analysis using Autopsy.
Certifications
Languages
Arabic · Native
English · Fluent