أسامه المالكي

• Embedded with cybersecurity teams as a full-time contributor across Threat Intelligence, SOC, Oversight & Measurement, Application Security, and
Vulnerability Management workstreams.
• Supported 20+ threat intelligence cases and daily monitoring activities covering leaked credentials, exposed assets, phishing domains, dark web claims,
brand impersonation, and third-party cyber incidents.
• Tracked and documented 100+ IOCs, suspicious domains, OSINT references, and follow-up items; escalated relevant observations to internal teams for
validation and response.
• Contributed to phishing website and malicious-domain takedown coordination, helping reduce brand abuse exposure and protect users from credential
harvesting attempts.
• Participated in SOC-related email triage and alert review, applying spam/phishing/malicious classification logic using sender reputation, content indicators,
URLs, and external checks.
• Used Splunk for SIEM/log-analysis concepts, Tenable for vulnerability management exposure, and ZeroFox for external threat monitoring, dark web
intelligence, and brand protection.
• Translated technical observations into clear business impact statements, recommendations, and concise presentation points for managers, senior
specialists, and cross-functional stakeholders.
• Contributed to Cybersecurity Maturity Assessment activities by reviewing OT security controls, integration processes, maturity evidence, and site-level
progress inputs.
• Prepared and maintained 5+ governance/executive reporting artifacts, including CCS maturity documentation, site overview material, progress reports, and
Cybersecurity at a Glance summaries for senior leadership.
• Co-developed risk heatmap visuals to prioritize cybersecurity risks by likelihood and impact, improving management visibility of key risk areas and required
actions.
• Completed technical rotations in Application Security and Integration, covering SAST/DAST concepts, secure API practices, credentials, roles, application
demos, and integration-related security risks.

• Supported Compliance and Assurance activities, cybersecurity assessments, governance reviews, and
evidence validation aligned with NCA ECC and ISO 27001 .