I am beginning my career journey and seeking opportunities to gain practical experience and grow.
I am assembling projects and examples as I gain experience; this section will show my early work and learning outcomes.
Worked a simulated Tier 1 alert queue end to end: prioritized alerts by severity, investigated each with EDR, log management, and email security tools, and closed or escalated every case with a written note Separated true positives from false positives and recorded the evidence behind each verdict
Investigated simulated incidents through Splunk searches, Wireshark packet captures, and Windows and Linux event logs Took phishing emails apart — headers, sender domain, links, and attachments — and documented each verdict Mapped attacker activity to MITRE ATT&CK and used the Pyramid of Pain to decide which IOCs to prioritize
I am beginning my career journey and seeking opportunities to gain practical experience and grow.
I am Mohammed Ziyad. I have little work experience and have not yet started my career. I am preparing to begin my professional journey and looking to apply my skills in real projects and roles.
Experience
General Manager
John's Live Poultry · 2017024–Present
Freelance PC Builder & Technician
Self-employed · 2024024–Present
Education
Reavis High School
High School Diploma
Skills
Worked a simulated Tier 1 alert queue end to end: prioritized alerts by severity, investigated each with EDR, log management, and email security tools, and closed or escalated every case with a written note Separated true positives from false positives and recorded the evidence behind each verdict
Investigated simulated incidents through Splunk searches, Wireshark packet captures, and Windows and Linux event logs Took phishing emails apart — headers, sender domain, links, and attachments — and documented each verdict Mapped attacker activity to MITRE ATT&CK and used the Pyramid of Pain to decide which IOCs to prioritize
Designed a simulated phishing email for a security awareness campaign, built on the pretexts and warning signs real attackers use Interpreted the simulation results to find where staff were most at risk and where awareness training was needed
Rebuilt the timeline of simulated attacks from packet captures and log evidence to establish what happened and when