Elsayed Samy

Cybersecurity Engineer with 3 years of experience in incident handling, vulnerability assessment, and network security operations, seeking to bring hands-on monitoring, triage, and incident-management experience to an Associate L1 Operations role. Skilled in firewall administration (Sophos), VPN, IDS/IPS, and network segmentation from direct implementation work, combined with Linux Administration, Python-based automation (FastAPI), RESTful API design, and PostgreSQL from building internal security tooling. Experienced in structured incident workflows — triage, root-cause analysis, remediation tracking, and stakeholder status reporting — directly aligned to SLA-driven operations environments.

Cybersecurity Specialist at Egyptian Ministry of Health and Population (2023-09 – Present)

• Conduct enterprise-wide vulnerability assessments across servers, web applications, and internet-facing assets using Nessus and OpenVAS, tracking findings through to remediation.
• Perform incident response for security events — triage, investigation, and root-cause analysis — coordinating containment and remediation with network, infrastructure, and development teams.
• Conduct web application security assessments against the OWASP Top 10, advising development teams on secure coding practices to reduce recurring vulnerability classes.
• Partner cross-functionally with infrastructure and network teams to harden overall security posture while maintaining compliance with internal policy and Egyptian data protection regulations.
• Author executive and technical security reports summarizing vulnerability posture, risk, and remediation status for leadership and technical stakeholders.

Network Security Consultant at Freelance (Startup Client) (2026-08)

• Designed and deployed a segmented enterprise network (LAN/WAN/DMZ/Guest) on Sophos Firewall with zone-based ACLs, NAT, and controlled inter-zone communication for a startup client's office environment.
• Configured SSL VPN for remote access, Web/Application Filtering, traffic shaping and quotas, and custom IPS signatures for targeted attack-pattern detection.
• Validated firewall and IPS controls through simulated attack testing and traffic analysis; delivered documented architecture, policies, and results to the client.

Penetration Testing Intern at PenForce (2025-11)

• Performed black-box penetration testing against client-facing web applications and network infrastructure, identifying and documenting exploitable vulnerabilities with remediation guidance.

Bachelor of Computer and Information Technology in Computer and Information Technology – EELU University (2026)