Ali's CV
Ali Abweh
Cyber Security Engineer | Red Team
Profile summary
Offensive Security Engineer with 30+ completed penetration tests across web, API, and Active Directory environments. Experienced in Purple-team engagements that bridge offensive tactics with defensive hardening; implements Zero-Trust segmentation in AD assessments to reduce lateral-movement risk. Skilled in exploit development, threat modeling, and vulnerability-management workflows. Partners with SOC teams to validate EDR detections and tune SIEM alerts (Splunk). Holds OSCP+, OSWA, OSIR, OSTH, CCNA.
Career highlights
Vulnerability Management: Identified 100 critical and high vulnerabilities within Web Application and Active Directory systems, providing remediation guidance that decreased average resolution time by 30 percent.
Active Directory: Executed security assessments using BloodHound and Mimikatz to identify misconfigurations, resulting in a 35 percent reduction in Active Directory vulnerabilities.
Professional Certification: Acquired five industry certifications, including OSCP+, OSWA, OSIR, OSTH, and CCNA, to support offensive security and incident response operations.
Key skills
Professional experience
- Executed 30+ web, API, and Active Directory engagements, managing the full attack lifecycle from reconnaissance to final reporting.
- Mapped adversary techniques to MITRE ATT&CK, documenting attack paths and associated impact.
- Identified 100+ critical and high-severity vulnerabilities across authentication, access control, and Active Directory systems, and delivered prioritized remediation plans.
- Assessed Active Directory security using Kerberoasting, BloodHound, and Mimikatz, which resulted in a 35% reduction in misconfigurations.
- Validated Microsoft Defender, SentinelOne EDR, and Elastic EDR configurations, which increased alert coverage by 25%.
- Integrated security findings into Splunk to refine SOC alert tuning and incident response workflows.
- Delivered 30+ technical reports, which reduced average remediation time by 30% by providing clear, actionable guidance.
- Built custom C++ and Python payloads and exploit code to execute EDR validation and physical HID attacks.
- Mentored 20+ offensive security trainees and served as backup Red Team Lead.
- Executed web application penetration testing and vulnerability assessment exercises during training.
- Analyzed endpoint detection mechanisms and attack surface vectors within controlled laboratory environments.
- Executed incident response workflows, including log analysis and attack reconstruction.
Projects
Built encrypted Linux backup system using SSH/rsync/cron, re-
Built encrypted Linux backup system using SSH/rsync/cron, reducing admin overhead by 60%. Implemented key-based auth and hardened permissions for secure data transfer.
Linux SSH rsync cronExtended CTFd with anti-cheat engine, reducing flag-sharing by 80% via dynamic challenge generation. Deployed using Docker, Nginx, and Linux; managed code with Git/GitHub.
CTFd Docker Nginx Linux GitDeveloped adversary simulation framework for endpoint detection testing and threat modeling. Simulated MITRE ATT&CK stages (execution, persistence, escalation, lateral movement). Validated detections using Sysmon and multiple EDR platforms.
Python Sysmon EDRImplemented key-based auth and hardened permissions for se- cure data transfer.
Education
Certifications
Languages
Arabic · Native
English · Intermediate