Tawfiq Ibrahim

• Uncovered 20+ security vulnerabilities through active reconnaissance, scanning, and manual exploitation using Nmap, Burp
Suite, and Metasploit, producing prioritized remediation reports for each identified risk.
• Assessed 10+ simulated hosts and web applications via Nessus/OpenVAS and manual validation, delivering CVSS-classified
findings with remediation recommendations for the top 8 critical issues.
• Reduced incident investigation time by ~40% by analyzing logs, identifying IOCs, and documenting repeatable SOC triage
procedures using Splunk.
• Exploited misconfigured SUID binaries and vulnerable kernels on Linux targets to achieve root access, documenting
escalation pathways and remediation steps.