Cybersecurity and Automation Engineer with 5+ years of experience, based in Lebanon and working remotely for enterprise clients in the UAE. I specialize in building security automation that scales, from incident response playbooks to AI-augmented SOC workflows.

My work sits at the intersection of security engineering and modern AI tooling. I was an early adopter of agentic AI within SOC environments, integrating LLMs for autonomous alert triage and threat intelligence enrichment before it became mainstream.

• 🔒 Specialized in Cortex XSOAR, Agentic AI, and Attack Surface Management
• 📉 Reduced MTTR by 40% and analyst workload by 35%
• 🧰 Off-hours I ship full-stack and IoT side projects: Next.js, Flutter, Express/MongoDB, Arduino
• 🎓 B.Eng. in Computer and Telecommunications Engineering from Antonine University

• Integrated agentic AI models into the SOC for threat detection, alert triage, and incident response, cutting analyst intervention by ~30%
• Developed 50+ Cortex XSOAR playbooks and 15+ Python scripts for SIEM, EDR, and WAF workflows, bringing triage from hours to minutes
• Built the ASM platform from scratch in Python with a distributed sensor-controller architecture and MongoDB backend, tracking 500+ external assets across 3+ client environments
• Set up REST integrations with third-party security tools to unify log ingestion, detection enrichment, and remediation across client environments
• Created 20+ offensive simulations with automated scheduling for continuous external exposure visibility
• Built an end-to-end phishing check flow inspecting inbound email for malicious attachments, phishing indicators, unsafe redirects, squishing, homoglyphs, impersonation, and spoofing
• Designed a passive asset discovery workflow comparing expected vs. observed coverage to surface blindspots via SIEM queries and EDR telemetry
• Containerized the sensor stack with Docker, cutting deployment time from hours to minutes

• Built an IoT flowmeter system using Arduino Mega and NodeMCU, paired with a Flutter mobile app for real-time telemetry and remote monitoring
• Added a NodeMCU-hosted fallback web interface for manual control when the mobile app is unavailable

• Ran 15+ OSINT investigations and wrote Python scripts to automate passive reconnaissance, cutting manual research time by 50%
• Contributed to the internal OSINT framework Darkivor

Professional and client work, built in private or closed-source environments.

Public repositories you can read, clone, and run.

🇱🇧 Arabic (Native) · 🇬🇧 English (Fluent) · 🇫🇷 French (Fluent)