H logo
Portfolio
Helmi Alagha
Professional ExperienceSelected roles
Senior Cybersecurity Consultant — Freelance
  • Led Red Team engagements for banks and telecoms; simulated APT tactics (phishing, C2, lateral movement).
  • Conducted full-scope web application pentests; delivered remediation plans and retest validation.
  • Built Python tooling for reconnaissance, scanning and PoC exploits; automated security checks in CI pipelines.
  • Advised on Zero Trust, MFA and baseline hardening; reduced critical risk exposure by >35%.
Stack: Burp Suite, Nmap, Metasploit, Wireshark, Python, Bash, AWS/Azure
Security Analyst — SOC / DFIR
  • Monitored SIEM alerts, triaged incidents, and performed memory & disk forensics and root-cause analysis.
  • Created detection rules and playbooks; improved MTTR by 28% and reduced false positives by 18%.
  • Worked with legal / compliance on evidence preservation and audit trails (GDPR / ISO 27001).
Stack: Splunk, ELK, Volatility, Sysinternals, Suricata
Highlighted ProjectsClient-safe details
Banking Web Apps Pentest

Identified critical authentication bypass and misconfigured object storage; produced remediation roadmap and verified fixes.

  • Risk reduced from Critical to Medium within 6 weeks.
  • Introduced SAST / DAST gates into CI to prevent regressions.
Cloud Hardening & Zero Trust

Hardened IAM, applied least-privilege, implemented segmentation, enabled MFA and centralized logging & guardrails.

Certifications & Training
  • Certified Penetration Tester
  • Network Defense & DFIR workshops
  • Cloud Security Foundations
  • Python for Offensive Security