Curriculum Vitae

Resume

Mohammed Aljedani

Information Technology Student & Cybersecurity Practitioner — Purple Team Operations, Penetration Testing & Detection Engineering

Jeddah, Saudi Arabiamhhhmjad@gmail.com github.com/0xMrHex LinkedIn Profile

Summary

Information Technology undergraduate at King Abdulaziz University (Expected 2028) focused on Purple Team operations, offensive penetration testing, and SIEM detection engineering. Experienced in building isolated Active Directory and Linux security labs to emulate MITRE ATT&CK techniques and author detection rules in Splunk, Sysmon, and Suricata.

Education

King Abdulaziz University

Bachelor of Science in Information Technology (Faculty of Computing and Information Technology)

Expected 2028

Certifications & Credentials

CompTIA Security+ (SY0-701) — CompTIA

Core security architecture, network defense, cryptography, incident response, and governance.

In Progress

Certified Professional Penetration Tester (eCPPT) — INE Security

Hands-on network penetration testing, Active Directory exploitation, pivoting, and web application attacks.

In Progress

Certified Penetration Testing Specialist (HTB CPTS) — Hack The Box

End-to-end enterprise penetration testing methodology, lateral movement, privilege escalation, and professional reporting.

In Progress

Technical Skills

Purple Team & Threat Validation

ATT&CK MatrixAtomic Red TeamLab ReplicationWindows Event LogsSysmonLinux AuditdPowerShell 4104PythonBashPowerShellREST APIs

Offensive Security (Red Team)

NmapMetasploitNetExecImpacketEnum4linux-ngBloodHoundRubeusMimikatzKerberos AbuseBurp SuiteffufOWASP Top 10SQLMap

Defensive Operations (Blue Team)

SplunkELK StackSigma RulesWiresharkTcpdumpSuricata IDSGroup Policy (GPO)gMSASSH HardeningFirewall Rules

Selected Security Projects & Labs

Active Directory Kerberoasting: Attack Emulation & SIEM Detection2026-09

Simulated Kerberoasting (MITRE ATT&CK T1558.003) in an isolated Active Directory lab and engineered Splunk correlation searches around Windows Event ID 4769.

Automated Phishing & Threat Intelligence IOC Triage Utility2026-07

Built a Python CLI workflow that parses suspicious email files (.eml), extracts URLs, IPs, and SHA-256 attachment hashes, and enriches them via threat intelligence APIs.

Endpoint Telemetry Validation with Sysmon & Atomic Red Team2026-05

Executed controlled credential-access and persistence tests on Windows endpoints to verify Sysmon visibility and Sigma rule coverage.

Internal Network Reconnaissance & SMB/LDAP Enumeration Lab2026-03

Documented offensive enumeration workflows across SMB, LDAP, and RPC services while capturing corresponding network signatures in Wireshark and Suricata.