Profile

Cybersecurity Engineer with practical expertise in blue-team operations, SIEM engineering, threat analysis, and security automation. Delivered full-stack security solutions including phishing triage pipelines, incident dashboards, NAS-based backup systems, and organization-wide security policies. Strong foundation in MITRE ATT&CK, NIST, and secure remote access architectures.

Education

Abu Dhabi University

Bachelor of Science (BSc) Cybersecurity Engineering
Jan 2021 – Expected Feb 2026 | Abu Dhabi, UAE
Work Experience

Freelance Cybersecurity Engineer

Confidential
Jun 2024 – Present | Remote

- Reduced critical risks by 80% by building a risk register and implementing security controls for 30+ threats.

- Authored security policies and frameworks (STRIDE, classification, change management), achieving 95% compliance.

- Hardened 10+ internal web apps, eliminating all SQLi and XSS vulnerabilities through secure coding practices.

- Cut brute-force attack success from 100% to 5% and boosted phishing detection accuracy from 40% to 85%.

- Deployed encrypted backup and recovery systems with 100% success in drills; automated monthly system hardening.

- Developed internal dashboards for incident response, streamlined AD onboarding, and secured remote access workflows.

Cybersecurity Intern

Bold Investment
Jan 2025 – Feb 2025 | Abu Dhabi
  • •Conducted Vulnerability Assessments & Penetration Testing (VAPT) using OpenVAS, Nessus, Nmap, and Nikto.
  • •Performed penetration testing with Metasploit, Hydra, and Burp Suite, documenting exploits.
  • •Managed SIEM tools (Splunk, Wazuh) for log analysis, event correlation, and security monitoring.
  • •Configured IDS/IPS (Snort, Suricata) for network threat detection.

    • Freelance IT Support

    Confidential
    Dec 2023 – Jun 2024 | Remote
  • •Resolved hardware and software issues, ensuring smooth daily operations.
  • •Streamlined support with a dedicated IT helpdesk and authored user-friendly manuals.
  • •Oversaw routine backups, ensuring data integrity and accessibility.
    • Certificates
    Practical Ethical Hacker Course: TCM SecurityCyberOps Associate: CiscoCCNA (Perusing): CiscoGoogle Cybersecurity Certificate: GoogleLinux Fundamentals: TCM SecurityPentesting Foundation: EC CouncilN|DE Network Defense Essentials: EC CouncilCybersecurity Engineer: TryHackMeIntro to Cybersecurity: TryHackMeIntro to Cybersecurity: Cisco NetAcad.
    Skills
    Cybersecurity Skills — Threat Modelling — Risk Management — Risk Register — Vulnerability Management — Asset Classification and Management —Deice Hardening — Policy Development — Security Implementation — Attack Surface Management — Vulnerability Assessment, Tools — Greenbone — VyOS — OpenVAS — MITRE — User Group Policy Editor — Windows Defender Firewall — Meterpreter — MSF Venom — John the Ripper — wfuzz — WPScan — CeWL-Crunch — Nikto — Graylog — PFSense — CrowdSec — Proxmox — Unraid — WireGuard — Splunk — Wazuh, Technical Skills — Java (Proficient) — Python (Exposure), Soft Skills — Communication — Teamwork — Leadership — Problem-Solving — Organization — IT Project Management
    Projects

    Ethical Hacking Home Lab — Kali Linux, Metasploitable

    Ameen Siddiqui
    1 / 1