Active Threat Hunting & Consulting

Defending Systems.
Exploiting Flaws.

I specialize in offensive security, infrastructure hardening, and automated threat detection—helping organizations fortify their digital perimeters before attackers strike.

OSCP & CISSP
Red & Blue Teaming
Zero Trust Arch
root@sec-ops:~ SECURE
Jawad@zawadabu:~$ nmap -sV -sC -p- target.domain.internal
Starting Nmap 7.94 ( https://nmap.org ) at 2026-09-10 12:45 UTC
Nmap scan report for target.domain.internal (10.0.42.15)
Host is up (0.012s latency).
22/tcp open ssh OpenSSH 8.9p1
80/tcp open http nginx 1.18.0
443/tcp open ssl/http Cloudflare Proxy
8080/tcp open http-proxy (VULNERABLE: CVE-2024-XXXX)
Jawad@zawadabu:~$ ./audit_siem_logs.py --status
[✓] Firewall: Active (0 Rules Breached)
[✓] SIEM Integration: Splunk Operational
[!] Threat Matrix: 0 Critical, 0 High Vulnerabilities Active
Jawad@zawadabu:~$
• Kali Linux • Burp Suite Pro • Wireshark • Metasploit • Splunk SIEM • Python & Bash • Docker & Kubernetes • AWS Security Architecture • CrowdStrike Falcon • Kali Linux • Burp Suite Pro • Wireshark • Metasploit • Splunk SIEM
Abu Jawad - Operator Profile
STATUS: ACTIVE

Operator Profile

Abu Jawad

I am a dedicated Cybersecurity Specialist bridging the gap between offensive testing and defensive infrastructure hardening. With a passion for uncovering vulnerabilities before they are exploited, I navigate complex networks to ensure robust security postures.

My expertise spans across Blue Teaming (SIEM architecture, incident response, and threat hunting), Red Teaming (web/API penetration testing and OSINT), and IT Infrastructure (Linux server hardening, virtualization, and networking).

Whether I am analyzing malicious traffic with Wireshark, dissecting an API for logical flaws, or writing custom Wazuh detection rules, my goal remains the same: building resilient systems that withstand sophisticated cyber threats.

Red
Offensive Sec
Blue
Defensive Sec
IT
Infrastructure

Capabilities & Experience

Security Operations

Defensive Security
Defensive Operations

Blue Team / Defensive Security

  • ▹ Build a SIEM dashboard to monitor failed login attempts using Wazuh custom rules and alerts.
  • ▹ Detect and investigate brute-force attacks through security log analysis.
  • ▹ Develop endpoint detection rules based on CrowdStrike and Microsoft Defender concepts.
  • ▹ Harden Linux servers according to CIS Benchmark recommendations.
  • ▹ Analyze and monitor network traffic using Wireshark.
  • ▹ Develop a SOC alert-triage workflow and checklist using Wazuh.
  • ▹ Implement File Integrity Monitoring (FIM) to detect unauthorized file changes.
  • ▹ Configure and manage basic firewall rules using iptables, OpenWrt, and IPFire.
Offensive Security
Offensive Operations (Ethical)

Red Team / Offensive Security

  • ▹ Write detailed Capture-the-Flag (CTF) walkthroughs and technical write-ups.
  • ▹ Perform web application security testing in intentionally vulnerable environments (bWAPP, Beebox, DVWA, OWASP Juice Shop).
  • ▹ Identify and exploit security misconfigurations in controlled lab environments.
  • ▹ Perform API security testing in vulnerable API platforms such as DVAPI and crAPI.
  • ▹ Conduct OSINT investigations using publicly available information.
  • ▹ Produce professional security assessment and penetration testing reports.
IT Infrastructure Security
Systems & Networking

IT Infrastructure, Systems & Network Security

  • ▹ Perform vulnerability assessments and scans using Nessus.
  • ▹ Deploy and configure network and infrastructure monitoring solutions such as Zabbix.
  • ▹ Diagnose and recover systems from disk, boot, and OS failures using tools like Hiren's BootCD PE & MediCat.
  • ▹ Install, configure, and optimize Linux and other operating systems on a wide range of hardware.
  • ▹ Configure and automate MikroTik routers and network devices.
  • ▹ Deploy and configure routers and firewall platforms, including OpenWrt, MikroTik, and IPFire.
  • ▹ Customize Linux desktop environments, particularly KDE Plasma, for a polished and user-friendly experience.
  • ▹ Manage Android devices using ADB, including file push/pull operations, debugging, and screen mirroring.
  • ▹ Deploy and manage applications using Docker containers.
  • ▹ Work with virtualization technologies such as QEMU/KVM and Proxmox at foundational and intermediate levels.

Let's secure
your infrastructure.

Need a security audit, penetration test, or incident responder? Send details regarding your scope and timeline.

Secure Email (PGP Available)

zawad.abu@protonmail.com

Location / Availability

Global Remote & Emergency On-Call

0/300
Secure Comm Channel
Abu Jawad
Initiating secure connection...

Hello! I'm Abu Jawad. Need a security audit or have a question about my capabilities?