Cyber Security / Primary career

Investigate clearly.
Respond precisely.

I’m Mohamed Khaled, a Cyber Security Engineer working in enterprise network security. I investigate incidents, troubleshoot secure connectivity, and turn technical findings into clear next steps.

Current focus

Network security.
Enterprise scale.

Orange Cyber Defense / Orange Business

L1 Network Security Engineer · CTS Team

B.Sc. Computer Science / Cyber Security
Misr International University

01 / Current role & operational experience

Current

Orange Cyber Defense.

L1 Network Security Engineer
CTS Team · Orange Business

300+

Security & network
incidents handled

Investigating enterprise network-security incidents across proxy, firewall, SSL/TLS, routing, and secure-access layers.

I review alerts, logs, traffic, and policy behavior to narrow down the issue, record the evidence, and coordinate escalation with L2 and adjacent teams.

  • Incident triage and structured troubleshooting
  • Firewall and secure web access investigation
  • Connectivity and SSL/TLS diagnosis
  • Clear technical handover and escalation

Operational work supported by SOC and DFIR training.

02 / Areas of practice

Follow the evidence.
Understand the system.

01

Enterprise operations

Network security

Investigating connectivity and secure-access incidents across firewall, proxy, routing, and SSL/TLS layers. Following traffic and policy evidence to isolate the cause and establish a clear escalation path.

  • Firewall & security policy investigation
  • SSL/TLS and secure web access
  • Connectivity, logs & packet analysis
02

Training & hands-on investigations

SOC & incident response

Alert triage, log correlation, and incident handling using SIEM tooling. Building an evidence-based view of an incident and documenting what needs containment, further analysis, or escalation.

  • SIEM alert handling & correlation
  • Incident triage and documentation
  • Escalation & response workflows
03

Training & practical lab work

DFIR & threat hunting

Windows, memory, and network forensics to investigate suspicious activity. Combining event logs, host artifacts, and PCAP evidence to reconstruct a sequence of events and test a hunting hypothesis.

  • Windows artifacts & memory analysis
  • PCAP investigation
  • IOC-driven hunting & YARA

03 / Technologies & tools

The working toolkit.

Enterprise technologies used in operational work, alongside SIEM, forensics, and analysis tools developed through training and practice.

Enterprise platforms

Palo Alto NetworksZscalerFortinet / FortiGateCheck PointF5 BIG-IPRubrik

SIEM & visibility

QRadarSplunkWazuhWireshark

Forensics & hunting

VolatilityAutopsyKAPEEvtxECmdYARA

04 / Certifications & training

A foundation built
through practice.

Certification

eLearnSecurity Certified Incident Responder

INE / eLearnSecurity

Incident response, log investigation, and practical blue-team scenarios.

Certification

Zscaler Digital Transformation Administrator

Zscaler

Zscaler administration, secure internet access, and policy management.

Training / Course

CCNA training

American University in Cairo / Cisco

Networking fundamentals, routing, switching, VLANs, and troubleshooting.

Training / Program

4-Month Intensive Training Program

Information Technology Institute

Digital Forensics & Incident Response track — SOC operations and host and network investigations.

05 / Graduation project · Misr International University

CyberEye.

Machine learning, in the browser.

A Chrome web extension using machine learning to detect malicious web activity and attacks. My graduation project connected a security problem with a working software implementation.

Project recognitionBest Cyber Security Project of the Year

Let’s connect

Good work starts
with a conversation.

For network security, SOC, or incident response opportunities, reach out by email or connect on LinkedIn. My CV is available below.

mohamed314k@gmail.com

Cairo, Egypt · Open to a conversation

View CV