Abdelwahab Ahmed Shendy
SOC Analyst | Security Automation | Cybersecurity Engineer
📍 Cairo, Egypt • 🌐 Portfolio | 💼 LinkedIn | 🐙 GitHub
Certifications
Work Experience
SOC & Detection Engineering Intern
ZeroSploit MEA · Oct 2025 – Jan 2026- Architected centralized ELK log pipelines using Winlogbeat, Filebeat, Fluent Bit, and Logstash across Windows/Linux hosts.
- Engineered automated incident triage, data retention, and remediation playbooks via n8n SOAR.
- Executed Active Directory attack simulations, developed Sigma rules, and mapped detection coverage to MITRE ATT&CK.
Training & Bootcamps
Penetration Testing Bootcamp
CyberTalents · Oct 2025 · Remote
Completed the ITI Universities Penetration Testing Bootcamp, solving 22 hands-on labs covering information gathering, vulnerability assessment, web security, exploitation, post-exploitation, and a final CTF.
Security Operations Center Bootcamp
WE INNOVATE · Sep 2025 – Oct 2025 · Hybrid
Completed an intensive SOC Engineering & Analysis bootcamp, gaining hands-on experience in SIEM deployment, threat hunting, incident response, PCAP analysis, and building an ELK Stack SIEM with n8n SOAR.
Windows Server Administration Bootcamp
National Telecommunication Institute (NTI) · Aug 2025 · Remote
Completed a Windows Server Administration training program with a score of 92.5%, gaining hands-on experience in Windows Server, Active Directory, Group Policy, DHCP/DNS, Failover Clustering, and disaster recovery concepts.
Networks Infrastructure Bootcamp
Information Technology Institute (ITI) · Jun 2025 · Remote
Completed a Network Infrastructure Summer Boot Camp, gaining hands-on experience in computer networks, routing and switching, with introductory training in network security, ethical hacking, and Huawei Cloud (HCCDA).
.NET Developer Bootcamp
EraaSoft · Nov 2024 – May 2025 · On-site
Completed a .NET Developer Bootcamp, building a strong foundation and gaining introductory hands-on experience in C#, ASP.NET Core, SQL Server, Entity Framework, MVC, 3-Tier Architecture, and SOLID principles.
Security Operations Center Bootcamp
AMIT Learning · Jun 2023 – Sep 2023 · On-site
Completed a SOC Boot Camp with a 100% final score, covering the fundamentals of SOC operations and providing an introduction to QRadar SIEM, incident response, malware analysis, and threat hunting.
Network Security Bootcamp
Information Technology Institute (ITI) · Aug 2023 · Remote
Completed a 120-hour program focused on network fundamentals, routing, switching, and firewall configuration. Acted as the team leader during group activities and projects.
Cybersecurity Fundamentals Bootcamp
Raya Academy · Oct 2022 – Dec 2022 · On-site
Built foundational skills in networking, Linux, programming, and cybersecurity through hands-on labs and CTF challenges.
Featured Projects & Labs
PhishOps: Automated Phishing Pipeline
End-to-end automated phishing email detection and response pipeline built with n8n. Parses email artifacts, enriches indicators using Threat Intelligence, calculates explainable risk scores, and automates SOC triage.
View Lab →Enterprise Multi-Zone Lab
Multi-zoned virtual enterprise infrastructure simulating full cyber-attack life cycles. Features pfSense firewall, ELK Stack SIEM, n8n SOAR automation, Metasploitable3, bWAPP, and full Windows domain environment.
View Lab →AD Attack Detection Lab
A realistic AD lab simulating a full Windows attack chain: Initial Access (Reverse Shell), Privilege Escalation, Credential Dumping (LSASS), and Lateral Movement (Pass-the-Hash). Includes custom Sigma rules mapped to MITRE ATT&CK.
View Lab →Enterprise Infrastructure: Windows Server
A comprehensive enterprise simulation featuring Dual Domain Controllers (PDC & ADC), advanced GPO security policies, DHCP Failover, DNS Round Robin load balancing, IIS Web High Availability, and FSRM File Server quotas.
View Lab →Key Reports & Write-ups
| Investigation | Focus | Platform |
|---|---|---|
| Boss Of The SOC (BOTSv1) | Splunk Enterprise hunt, endpoint investigation, web attacks | View Notes |
| QRadar101 Investigation | Rule validation, offenses triage, network flow analysis | View Walkthrough |
| PsExec Hunt | Lateral movement identification, Windows Event IDs, PCAP | View Report |
| HawkEye Malware Infection | Keylogger network traffic, payload analysis, Wireshark | View Walkthrough |
| Disk Forensics & DFIR | Evidence integrity, SHA-256 hashing, Autopsy & FTK | View Guide |