Security Operations Analyst*

Mahmoud (“Michael”) Al Kurdi. Eight years of federally regulated aviation security operations. CompTIA Security+ certified. B.S. in Information Technologies, cybersecurity concentration, summa cum laude. Every claim on this page maps to a public repo, credential, or document.

08 YRS Federally regulated security operations — American Airlines, CLT, 2015–2023
SEC+ ce CompTIA Security+ (SY0-701) — issued 01.2025, valid through 01.2028
3.96 GPA — B.S. Information Technologies, cybersecurity. Summa cum laude, SNHU
SEC. 02 — AboutWho is asking you to trust them

About.

Claims are cheap.
Receipts are not.

I spent eight years as an Aviation Security Operations Crew Chief at American Airlines in Charlotte — federally regulated operations under FAA, OSHA, IATA, and CBP requirements, holding a security clearance and CBP badge endorsement for international flight operations. Recurrent incident-response and safety/security training. Identity validation, access control, and documentation where the standard was not “pretty good” — it was audit-ready, every day.

Then I made it official: a B.S. in Information Technologies (cybersecurity concentration) from Southern New Hampshire University — summa cum laude, 3.96 GPA, Sigma Psi chapter of Alpha Sigma Lambda — and CompTIA Security+ ce (SY0-701).

The work I publish holds to the same standard. My benchmark scores AI coding agents on defensive security discipline — ATT&CK mapping, prompt-injection resistance, knowing when to say “No Clear Mapping.” My tooling ships with tests, a doctor CLI, and a readiness runbook. If a claim on this page cannot be traced to a public repo, a credential, or a document, it is not on this page.

TABLE 01 — Employment ledgerComplete. Nothing omitted.
YearsRole / OrgWhat it proves
2015–23 Aviation Security Operations Crew Chief American Airlines — Charlotte, NC 8 yrs — federally regulated Security clearance + CBP badge endorsement. International flight ops under FAA / OSHA / IATA / CBP. Recurrent incident-response and safety/security training. High-accountability documentation, identity validation, access control.
2024–25 Courier & Logistics Specialist USPS — Kannapolis, NC Kept working while finishing the degree. Federal service standards, zero-drama reliability.
2025–NOW Delivery Associate Fossa Logistics LLC (Amazon DSP) — Charlotte, NC Current day job while interviewing for security operations roles. The portfolio below is what nights and weekends produce.

SOC / SecOps

  • Alert triage
  • Security monitoring
  • Incident documentation
  • Log analysis
  • Evidence review
  • Authentication events
  • DNS investigation
  • Remediation planning
  • Escalation notes

Cybersecurity

  • MITRE ATT&CK
  • Defensive security
  • Prompt-injection resistance
  • Access control
  • Least privilege
  • Security documentation
  • Confidence scoring
  • “No Clear Mapping” handling

AI / Automation

  • AI coding-agent evaluation
  • Reproducible benchmark design
  • Rubric-based scoring
  • Prompt architecture
  • Safety rules
  • Acceptance criteria
  • Automated reporting

Tools

  • Python / pytest
  • JavaScript / Node.js / npm
  • PowerShell / Bash
  • Git / GitHub
  • Gradio
  • HTML / CSS
  • Markdown / JSON / YAML
SEC. 03 — Projects4 items. All real. All defensive.

The receipts.

P/01

AgentForge

One spec, many agents. A configuration framework for agentic AI coding assistants — published to npm.

Write your project rules once; AgentForge compiles them into native configuration for six adapter targets: Claude Code, Codex, Gemini CLI, Cursor, Aider, and a generic fallback. No more six drifting copies of the same instructions.

It ships like software, not a gist: adapter round-trip tests, install smoke tests, a doctor CLI for diagnosing broken setups, a readiness runbook, and a live demo. MIT licensed.

TypeConfiguration framework — agentic AI coding assistants
Targets6 adapters — Claude Code / Codex / Gemini CLI / Cursor / Aider / generic
Shippednpm — @kmitops/agentforge@0.3.1
ProofRound-trip tests · smoke tests · doctor CLI · readiness runbook · live demo
LicenseMIT
Repo Live demo npm
P/02

ATT&CKLens Benchmark

Can AI coding agents build secure, uncertainty-aware, MITRE ATT&CK-aligned defensive tooling? I built a reproducible benchmark to find out.

Seven agent artifacts, one branch per agent, scored against a rubric of 100. Graded on ATT&CK mapping discipline, prompt-injection resistance, evidence citation, uncertainty handling (“No Clear Mapping”), detection ideas, remediation guidance, and the analyst follow-up questions each artifact asks.

Anyone can re-run the entire harness with benchmark-all.ps1 and check my grades. That is the point: an evaluation you cannot reproduce is an opinion.

TypeReproducible defensive cybersecurity benchmark
Subjects7 agent artifacts — one branch per agent
Rubric100 points — mapping, injection resistance, evidence, uncertainty, detection, remediation, follow-ups
Re-runbenchmark-all.ps1 — full harness, your machine
LicenseMIT
TABLE 02 — ScoreboardRubric /100 — reproducible
#Agent/100
1Cursor
100
2Claude Code
98
2Hermes Nemotron
98
4Codex
96
5Lovable (repaired)
76
6Mistral Vibe
75
7Lovable (original)
40

MITRE ATT&CK® is a registered trademark of The MITRE Corporation.

Repo + harness
P/03

Vulnerability Management Mini Program

Python · Flask · SQLite

A working vulnerability-management dashboard: full CRUD, KPI cards, search, filtering, and severity states. The unglamorous plumbing of a real security program — built end to end.

P/04

Security Log Anomaly Detection

Python · pandas · NumPy

Rule-based plus statistical detection for authentication and network anomaly triage. Where the ledger of eight years of ops meets the math — flag it, score it, document it.

SEC. 04 — ResumeOne page. One PDF. No padding.

Resume.

Certification
CompTIA Security+ ce (SY0-701) Issued Jan 7, 2025 — valid through Jan 7, 2028
Degree
B.S. Information Technologies — Cybersecurity concentration Southern New Hampshire University — conferred Jan 1, 2026
Honors
Summa cum laude — 3.96 GPA Sigma Psi chapter — Alpha Sigma Lambda honor society
Experience
8 years federally regulated security operations American Airlines CLT — clearance + CBP badge endorsement
Seeking
SOC / Security Operations / IR / Detection / Security Automation Full-time — Charlotte, NC or remote
Download
the PDF Michael_Kurdi_Resume_2026.pdf2026 — current

Same facts as this page. Every line verifiable. Bring it to the interview and check.

SEC. 05 — ContactReplies fast. Shows up prepared.

Hire the
analyst.

Building a SOC, a detection pipeline, or an IR bench? You want people who document like auditors are watching — because for eight years, they were.

kurdi.michael.it@gmail.com
Phone (704) 456-8322 GitHub github.com/KM-it-ops LinkedIn mahmoud-michael-al-kurdi Site km-it-ops.github.io
Base Charlotte, NC — remote OK