Cyberpedia alumni · Reviewed profile
Majd Alhumidi
Wazuh SIEM SOC Analysts L1 Log Analysis
- Specialty
- Cloud and network security, Security operations
- Availability
- Open to discussion
- Open to
- Internship, Employment
Their email is shared only if they accept your inquiry.
About
I am Majd Alhumidi, a Blue Team Cybersecurity Specialist, SOC Analyst, and Network Administrator with a strong foundation in enterprise network infrastructure, cloud architecture, and AI-driven security operations. Holding a Technical Diploma in Networking & IT alongside an intensive Cybersecurity Bootcamp from Cyberpedia, I bridge the gap between hands-on network engineering and proactive threat defense In my role managing wireless ISP and network environments at Star Net, I configure and secure MikroTik RouterOS, Ubiquiti links My technical toolkit spans endpoint forensics, packet analysis using Wireshark, and custom security automation through Python and PowerShell scripting. Certified in AWS Cloud Architecture (VPC, EC2, ALB, RDS, CloudWatch) as well as TryHackMe’s SOC Level 1 and AI Security pathways, I continuously refine my capabilities in threat hunting and cloud defense. I am passionate about building intelligent, self-defending networks and collaborating on impactful Blue Team and cloud security initiatives.
Projects
Hybrid AI-Powered SOC: Integrating Wazuh SIEM, AWS, and MikroTik with a Local AI Triage Agent
Modern Security Operations Centers (SOCs) managing hybrid environments face three critical operational challenges: 1. Visibility Gaps: On-premises network infrastructure (such as ISP/enterprise MikroTik routers and Windows endpoints) often operates in silos separated from cloud environments (AWS), making multi-stage attack correlation difficult. 2. Tier-1 Alert Fatigue: High-volume perimeter reconnaissance, port scanning, and brute-force attempts generate thousands of daily alerts, overwhelming L1 analysts with repetitive manual log parsing and triage. 3. Compliance vs. Blind Automation Risks: Sending sensitive security telemetry (IPs, usernames, infrastructure logs) to external cloud LLMs violates strict data sovereignty and compliance frameworks (such as ISO 27001 and GDPR). Conversely, relying on blind, fully automated firewall blocking introduces the operational risk of false-positive outages on critical network gateways. This project was initiated to bridge on-premises network administration and cloud security monitoring by engineering a compliant, privacy-first Hybrid AI-SOC that automates L1 forensic investigation locally while keeping final containment decisions under human governance.
- Wazuh SIEM
- AWS
- MikroTik RouterOS
- Ollama
- ChromaDB
Skills
- Cloud security
- Networking
- MikroTik RouterOS
Work preferences
- Work mode
- Remote, Hybrid
- Languages
- Arabic (Native) · English (Intermediate)
Certifications
SOC Level 1
AI Security
AWS Cloud Architecture: Foundations to Solutions Architect Associate (SAA)
Links
Cyberpedia affiliation was verified and the profile reviewed before publication. Verification does not certify every skill or credential.