Omar Ben Mariem

• Led technical operations and authored 10 CTF challenges for Hack To The Future.
• Managed challenge lifecycle (design, testing, deployment) and collaborated on realistic learning scenarios.

• Handled more than 100 account-access and security-related cases/week (recovery, suspicious activity, access issues).
• Escalated account-compromise and fraud-suspicion cases to internal teams following security procedures.

• Conducted penetration testing across systems and services following NIST SP 800-115 methodology, identifying 10+
vulnerabilities and misconfigurations through structured vulnerability management practices.
• Led design and deployment of a Security Operations Center (SOC) benchmarked against the SOC-CMM maturity
model, integrating Threat Intelligence feeds and MITRE ATT&CK-aligned detection logic across 7 tactics and 10
techniques for centralized monitoring.
• Engineered log collection, correlation, and alerting workflows across 30+ log sources; reduced alert volume from
128K/quarter to 11/week and drove false-positive rate from 99% down to 15%, achieving a median detection latency
(MTTD) of 124 seconds.

• Delivered CompTIA Security+ instruction over a 6-month programme, covering threat management, cryptography,
identity and access management, and security operations.
• Mentored students through hands-on labs and exam preparation, translating real-world SOC and detection experience
into practical coursework.

• Designed and deployed an open-source SOC stack (Wazuh, Filebeat, Elasticsearch, Kibana) as an initiation project,
gaining hands-on experience with centralized log collection and security monitoring fundamentals.
• Integrated SIEM and IDS components across 200 data sources, configuring basic alerting workflows and developing
foundational understanding of detection pipeline architecture.

• Resolved technical issues related to account security, ensuring secure access for users.
• Monitored and reported suspicious activities, contributing to fraud prevention efforts.
• Collaborated with IT teams to implement security best practices for customer accounts.

• Assisted in securing network infrastructure by identifying and mitigating vulnerabilities.
• Monitored system logs using SIEM tools to detect and respond to potential threats.
• Supported IT teams in implementing security policies and ensuring compliance with industry standards.