رشدى محمد

As a Cloud & Security Engineer at EBLA, I lead and support the design, deployment, and hardening of secure Microsoft Azure environments for enterprise clients. I specialize in implementing Microsoft’s unified security platform (Defender XDR, Sentinel, Entra), deploying governance-aligned Landing Zones, and managing end-to-end cloud migrations from on-premises infrastructure.

Key Responsibilities & Achievements:

-Designed and deployed Azure Landing Zones with governance baselines, CAF-aligned resource organization, and security policies to enforce compliance.

-Implemented Microsoft Sentinel from the ground up, including data connectors, custom analytic rules, KQL queries, playbooks, and incident response workflows.

-Led Sentinel investigations across multiple tenants, improving threat visibility and SOC response time through automation and fine-tuned detection logic.

-Hardened Microsoft Defender XDR components, including Defender for Cloud, Identity, Endpoint, and Microsoft 365, integrating alerts across the XDR platform.

-Secured Azure infrastructure with NSGs, UDRs, private endpoints, Application Gateway, and WAF; enabled VPN Gateway and ExpressRoute for hybrid access.

-Configured identity and access using Azure AD (Entra ID), PIM, RBAC, Conditional Access, MFA enforcement, and Break Glass accounts.

-Monitored cloud resources with Azure Monitor, Log Analytics, VM Insights, Backup, and Update Manager to ensure resilience and operational readiness.

-Supported client audits and compliance by aligning deployments with NIST, CIS, and Zero Trust frameworks.

Technologies & Tools:
Microsoft Sentinel, Defender XDR, Entra ID, Azure AD Connect, Intune, Azure Firewall, VPN Gateway, ExpressRoute, WAF, Application Gateway, Azure Monitor, KQL, PowerShell, Terraform, Microsoft CAF, Azure Policy

Key Achievements:
🔹 SIEM & Incident Response: Built and managed Microsoft Sentinel from scratch for advanced threat detection, investigation, and response.
🔹 Security Hardening: Secured Azure infrastructure, including Application Gateway, Azure WAF, and security best practices for cloud workloads.
🔹 Threat Hunting & Intelligence: Developed custom detection rules using KQL, automated threat mitigation, and conducted phishing simulations.
🔹 Identity & Access Management (IAM): Implemented Intune, Conditional Access Policies, and Microsoft Entra ID (Azure AD) to enforce strong security policies.
🔹 Endpoint & Cloud Security: Optimized Microsoft Defender for Cloud & Microsoft 365 Defender for proactive threat protection.
🔹 Compliance & Risk Management: Provided security insights, ensuring best practices, governance, and compliance adherence.

🛠 Tools & Technologies: Microsoft Sentinel | Microsoft Defender | Azure AD | SIEM | KQL | IAM | Intune | Conditional Access | PowerShell | Python

Managed L1 and L2 alerts in the Security Operations Center (SOC), ensuring rapid and effective incident response.
Specialized in Azure Sentinel and Microsoft Defender, maintaining system configurations, analyzing logs, and mitigating risks through advanced threat detection and response strategies.
Collaborated with the Threat Hunting and Detection Team, managing detection rules using KQL, configuring automation rules, and preparing comprehensive Incident Response (IR) reports.
Delivered security demonstrations, customized Sentinel configurations, and aligned solutions with customer-specific security requirements.

Threat Hunting & Detection Team Member:
Conducted detailed log analysis and implemented detection rules to proactively identify threats.
Ensured seamless communication with customers to address requests and maintain an optimized security posture.
Focused on process enhancements and operational excellence within the SOC environment.

Azure Maintenance Team Member:
Played a pivotal role in maintaining Azure configurations to support secure and scalable environments.
Contributed to system optimization and streamlined configuration processes.

Additional Experience:
Hands-on experience with SentinelOne solution for advanced endpoint protection and security management.
Prepared detailed security reports for Microsoft Sentinel and Defender, showcasing actionable insights for improved organizational security
Hands-on experience with SentinelOne for advanced endpoint protection and security management.

As an intern at Luminus Technical University College, I have been actively engaged in an enriching online training program focused on cloud computing. Throughout the internship, I have gained valuable hands-on experience in working with cloud technologies, particularly AWS (Amazon Web Services). I have been exposed to a wide range of cloud services, learning to design and implement solutions that drive efficiency and scalability. Collaborating with experienced professionals and instructors, I have honed my problem-solving abilities and strengthened my understanding of networking and security concepts in the cloud environment. The internship has been a remarkable opportunity to apply my academic knowledge to real-world scenarios, preparing me for a successful career in IT and cloud technologies.

During the CCNA Incubator Program at Estarta, I underwent an intensive and hands-on training experience to earn the Cisco Certified Network Associate (CCNA) certification. The program focused on fundamental networking concepts and practical implementation, equipping me with the necessary skills to design, configure, and manage small to medium-sized networks