Azure Sentinel • Wazuh • Splunk • KQL • Python • React • Node.js • TypeScript • Melbourne, Australia

Master of Cybersecurity (Monash, Group of Eight) | AWS Certified | Full Work Rights (485 Visa)

🔐 Cybersecurity Portfolio: https://cybersecurity-portfolio-drab.vercel.app | 🌐 Dev Portfolio: https://my-portfolio-seven-tawny-79.vercel.app

💼 LinkedIn: https://www.linkedin.com/in/fadhih | 💻 GitHub: https://github.com/mdfadhih

Security & Cloud Engineer and Full Stack Developer with 3+ years building production applications and hands-on SOC operations experience across Azure Sentinel, Wazuh, and Splunk.

• 🔐 Built 3 cybersecurity projects — Azure Sentinel SOC lab, Wazuh+Splunk home lab (1,195 alerts), Python OWASP scanner
• 🛡️ SOC internship at Digillium — 500+ monthly alerts triaged, zero missed critical events, 20% false positive reduction
• ☁️ AWS CCP certified | Master of Cybersecurity — Monash University (Group of Eight)
• 🤖 Built DocuChat — full-stack RAG app with Gemini AI, vector embeddings and streaming responses
• ⚡ 8+ production applications serving 10,000+ daily users
• 🌏 Based in Melbourne, Australia with full work rights (485 Visa)

I combine security operations, cloud engineering, and full stack development — meaning I don't just detect threats, I understand how systems are built and where they break.

• ✅ SOC operations — real internship experience triaging 500+ monthly alerts in 24/7 production
• ✅ Hands-on lab work — 1,195 Wazuh alerts, Azure Sentinel KQL rules, Kali Linux attack simulations
• ✅ Secure development — OWASP Top 10, JWT/OAuth 2.0, IAM least-privilege built into every project
• ✅ AI engineering — RAG pipelines, vector search, LLM integration, streaming responses

Tech: Azure Sentinel · KQL · AWS CloudTrail · GuardDuty · Windows Server 2022 · NIST IR

Cloud SOC detection lab on Microsoft Azure — simulated 5 MITRE ATT&CK techniques, wrote 8 custom KQL detection rules, documented 3 NIST IR incident reports.

• 🎯 5 attack simulations: T1110 brute force · T1053 persistence · T1059.001 PowerShell · T1087 enumeration · T1078 valid accounts
• 🔍 8 custom KQL Sentinel Analytics rules with MITRE mapping and tuning notes
• 📋 3 full NIST IR incident reports with evidence chains and remediation
• ☁️ AWS CloudTrail + GuardDuty layer for cloud threat detection

Tech: Wazuh 4.7 · Splunk 9.2 · Kali Linux · VirtualBox · Metasploit · Hydra · Sysmon

3-VM home SOC lab — Ubuntu (Wazuh SIEM), Windows Server 2022 (target), Kali Linux (attacker). Real attacks, real detections.

• 🚨 1,195 total Wazuh alerts · Level 12 Critical detection (T1484 — Administrators group changed)
• ⚔️ nmap · Hydra · Metasploit EternalBlue from Kali Linux attacker VM
• 📊 3 Splunk dashboards: Failed Login Monitor · Process Creation · Security Events Overview
• 📋 3 NIST IR incident reports covering reconnaissance, brute force, privilege escalation

Tech: Python 3.11 · Docker · GitHub Actions · OWASP · DVWA · pytest

Custom Python web vulnerability scanner with 5 OWASP checks and HTML report generation.

• 🔍 5 checks: SQL injection (A03) · XSS (A03) · Open ports (A05) · Security headers (A05) · Directory traversal (A01)
• 📄 Generates HTML reports with severity ratings, OWASP reference and remediation guidance
• 🐳 Dockerised + GitHub Actions CI — spins up DVWA, runs pytest, executes full scan on every push
• ✅ Confirmed detections across all 5 OWASP checks against DVWA

Tech: React · TypeScript · Node.js · Gemini AI · Supabase pgvector · Vercel · Render

Full-stack RAG application — upload any PDF and chat with it using natural language.

• 🧠 Complete RAG pipeline: PDF parsing → chunking → vector embeddings → cosine similarity → streaming LLM response
• ⚡ Streaming responses token by token using Server-Sent Events
• 🎯 Dynamic question suggestions generated from document content using Gemini AI
• 🗄️ Vector storage with Supabase pgvector (768-dim Gemini embeddings)

Tech: React · TypeScript · AWS Lambda · S3 · API Gateway · IAM

• Serverless architecture with secure S3 upload using presigned URLs and IAM least-privilege access control
• Reduced image processing time by 30% with optimised Lambda functions
• Sub-second response times across all endpoints

Tech: React · TypeScript · Python (Flask) · PostgreSQL · Mapbox

• Full-stack application with dynamic filtering and map visualisation
• Optimised PostgreSQL queries achieving sub-200ms response times
• Increased user engagement by 35% through geospatial interface

• 🔐 Actively seeking SOC Analyst / Security Analyst roles in Melbourne
• 🛡️ Studying CompTIA Security+ SY0-701 (expected Aug 2026)
• 🤖 Building AI-powered applications with RAG pipelines and LLM integration
• ☁️ Expanding AWS and Azure security expertise
• 🚀 Building production-ready applications with Next.js and TypeScript

📍 Melbourne, Australia | 💼 Open to: SOC Analyst · Security Analyst · Cloud Security · Full Stack Engineer

⚡ I combine security operations, cloud engineering, and full stack development — building things that are fast, secure, and production-ready.