Albara Alsayyed

• Performed SOC activities including security monitoring, alert triage, and incident response using Splunk
• Conducted vulnerability assessments and penetration testing in simulated environments
• Applied security frameworks including NIST CSF, ISO 27001, and MITRE ATT&CK
• Worked with Linux security (system hardening, access control) and enterprise firewalls (Fortinet, Palo Alto)
• Analyzed logs and detected potential threats across multiple scenarios
• Training covered certification domains and hands-on courses including CEH, Security+, CND, ECIH, CHFI, CCSP,
CISSP fundamentals, FortiGate Security, Splunk Fundamentals (Level 1 & Level 2), Network Operations Center
(NOC), and Security Operations Center (SOC)

• Led an international cybersecurity team in Capture The Flag (CTF) competitions, enhancing skills in web
exploitation and reverse engineering.
• Built QnQSec from zero into a 50+ member recognized international security team Building, recruiting,
structuring, and developing talent across years.
• Designed and authored original CTF challenges simulating real adversarial scenarios (AD exploitation, web vulns,
OSINT) -- deployed in live competitions.
• Organized and executed QnQSec CTF 2025 end-to-end: challenge design, infrastructure, scoring system, and live
event — $20, 000+ in prizes.
• Managed team operations, including onboarding and competition strategy, to optimize performance in global
events

• Organized training sessions and workshops to foster knowledge-sharing and strengthen team capabilities in
ethical hacking.
• Designed and authored original CTF challenges simulating real adversarial scenarios (AD exploitation, web vulns,
OSINT) -- deployed in live competitions.
• Organized and executed Cyber-eto CTF 2025 (Philadelphia University) end-to-end: challenge design,
infrastructure, scoring system, and live event — $10, 000+ in prizes.
• Led team to 55th place out of 250 global teams at BlackHat MEA 2024 in Riyadh — the worlds largest
hacking competition (Guinness certified, 90+ nationalities).

• Provided L2 technical support, resolving 20-30+ incidents weekly across systems and networks
• Supported 250+ users, managing accounts, access control, and permissions via Active Directory
• Maintained 100+ endpoint devices, ensuring system performance and availability
• Reduced average incident resolution time (MTTR) by 30-40% through efficient troubleshooting
• Monitored and maintained network infrastructure (LAN/WAN, DNS, DHCP, VPN), improving network reliability
• Applied system hardening and patch management practices, reducing security risks across endpoints
• Demonstrated ability to independently troubleshoot and resolve complex system and network issues

• Executed adversarial red team simulations across 10+ production and high-security environments,
identifying critical attack paths across web applications and enterprise networks
• Discovered and exploited vulnerabilities in 15+ web applications and network systems; delivered
reproducible PoCs and remediation-ready reports to stakeholders
• Mapped real-world attack surfaces and analyzed lateral movement opportunities across 5+ segmented
environments — translating findings into risk-prioritized reports
• Developed 5+ custom exploit scripts and attack tooling for identified vulnerabilities, accelerating proof-of
concept validation and reducing remediation timelines by 30%
• Operated within high-security, defense-adjacent environments, delivering 10+ structured security reports
under strict operational and confidentiality constraints

• Completed 80+ hours of hands-on training in penetration testing, network security, and incident response
• Studied CEH (Certified Ethical Hacker) content and applied concepts through practical labs
• Performed vulnerability assessment workflows and log analysis in simulated enterprise environments (Linux & Windows)
• Developed Python and PowerShell scripts to automate basic security and analysis tasks

• Participated in national-level cybersecurity exercises focused on threat hunting and security monitoring
• Analyzed network activity and supported incident investigation in a government security environment
• Gained practical exposure to infrastructure security and real-world security operations