Ali Alshaheen

>> DEFENSIVE CYBERSECURITY & INFORMATION ASSURANCE

Specializing in SOC Operations, Threat Analysis, and Vulnerability Management. Bridging the gap between computer science fundamentals and modern security defense.

Verified Credentials

MASTER OF SCIENCE

Cybersecurity & Information Assurance

Western Governors University (WGU)

BACHELOR OF SCIENCE

Computer Science

University of Illinois Chicago (UIC)

🛡️ CompTIA CySA+
🔐 CompTIA Security+
🕵️ CompTIA PenTest+
📜 ISC2 CC

Technical Arsenal

SIEM & Log Analysis

Splunk, ELK Stack, Azure Sentinel

Vulnerability Mgmt

Tenable Nessus, Qualys, OpenVAS

Network Defense

Wireshark, Nmap, Snort/Suricata, FW

Security Automation

Python, Bash, PowerShell

Frameworks

MITRE ATT&CK, NIST CSF, OWASP

Endpoint Security

EDR Solutions, Sysmon, Osquery

Mission Log / Projects

DEFENSE COMPLETED

Home Lab SIEM Deployment

Deployed an ELK Stack (Elasticsearch, Logstash, Kibana) to ingest and visualize logs from a Windows Active Directory environment. Configured alerts for brute force attempts and privilege escalation.

ELK Stack Sysmon Winlogbeat
ANALYSIS ACTIVE

Malware Analysis Sandbox

Created an isolated environment using REMnux and FlareVM to safely detonate and analyze suspicious executables. Performed static analysis (strings, hashes) and dynamic analysis.

Wireshark Ghidra VirtualBox
AUDIT COMPLETED

Vulnerability Assessment Report

Conducted a full vulnerability scan against a target network using Nessus. Categorized findings by CVSS score, removed false positives, and drafted a remediation plan for stakeholders.

Nessus CVSS Reporting
AUTOMATION COMPLETED

Automated Threat Intel Feed

Developed a Python script that aggregates IP reputation data from AbuseIPDB and AlienVault OTX, automatically updating firewall blocklists to prevent communication with known C2 servers.

Python API Integration Threat Intel