UNIT KM-01 M. "MICHAEL" AL KURDI
SECURITY OPERATIONS DEFENSIVE ONLY

Mahmoud "Michael" Al Kurdi

Security Operations Analyst — SOC · IR · Detection

Eight years running federally regulated aviation security operations for American Airlines — clearances, CBP endorsement, incident-response drills, and documentation that had to hold up under audit. Now Security+ certified, degreed in cybersecurity summa cum laude, and building defensive tooling in public. Every claim on this panel maps to a public repo, credential, or document.

Designation
SOC / Security Operations / Incident Response Analyst
Certification
CompTIA Security+ ce (SY0-701) · valid thru 01/2028
Education
B.S. IT — Cybersecurity · SNHU · Summa Cum Laude
Base
Charlotte, NC · remote OK · full-time available
Operator Telemetry
Regulated Security Ops 8 YRS
GPA — Summa Cum Laude 3.96
AI Agents Benchmarked 7

ALL READINGS VERIFIABLE — SEE PANELS 02–04

PANEL 02

Operator Specifications

IDENTITY · CREDENTIALS · CAPABILITIES

Service History

I spent eight years (2015–2023) as an Aviation Security Operations Crew Chief for American Airlines in Charlotte — federally regulated operations under FAA, OSHA, IATA, and CBP requirements, holding a security clearance and CBP badge endorsement for international flight operations. The job was identity validation, access control, recurrent incident-response and safety/security training, and documentation accurate enough to survive a federal audit. That is SOC discipline, learned on a live ramp instead of a dashboard.

I converted that operational foundation into formal credentials: a B.S. in Information Technologies, Cybersecurity concentration (Southern New Hampshire University, summa cum laude, 3.96 GPA) and CompTIA Security+ ce. Along the way I built and published defensive security tooling — including a reproducible benchmark that scores AI coding agents on whether they can build secure, MITRE ATT&CK-aligned defensive tools without overclaiming.

The operating principle across all of it: evidence first. Alerts get documented, claims get cited, and anything without a clear mapping gets flagged as exactly that — no guesswork dressed up as confidence.

Certification

CompTIA Security+ ce

SY0-701 · issued JAN 07 2025 · valid thru JAN 07 2028

Education

B.S. Information Technologies

Cybersecurity concentration · SNHU · conferred JAN 2026
Summa Cum Laude · 3.96 GPA · Alpha Sigma Lambda (Sigma Psi)

SOC / SecOps

10 MODULES
  • alert triage
  • security monitoring
  • incident documentation
  • log analysis
  • evidence review
  • authentication events
  • DNS investigation
  • vulnerability awareness
  • remediation planning
  • escalation notes

Cybersecurity

8 MODULES
  • MITRE ATT&CK
  • defensive security
  • prompt-injection resistance
  • access control
  • least privilege
  • security documentation
  • confidence scoring
  • "No Clear Mapping" handling

AI / Automation

7 MODULES
  • AI coding-agent evaluation
  • reproducible benchmark design
  • rubric-based scoring
  • prompt architecture
  • safety rules
  • acceptance criteria
  • automated reporting

Tooling

13 MODULES
  • Python
  • Gradio
  • JavaScript
  • Node.js
  • PowerShell
  • Bash
  • Git/GitHub
  • Markdown
  • JSON
  • YAML
  • HTML/CSS
  • pytest
  • npm
PANEL 03

Field Units

PUBLIC REPOS · VERIFIABLE OUTPUT

Notice — all security work on this panel is defensive: detection, triage & mitigation only.

UNIT-01

AgentForge

Operational

"One spec, many agents." A configuration framework for agentic AI coding assistants: write your project rules once, and AgentForge compiles them for six adapter targets — Claude Code, Codex, Gemini CLI, Cursor, Aider, and a generic fallback. Shipped to npm and proven with tests, not promises.

Type
Config framework for AI coding assistants
Targets
6 adapters — Claude Code · Codex · Gemini CLI · Cursor · Aider · generic
Distribution
npm · @kmitops/agentforge@0.3.1
Proof
adapter round-trip tests · install smoke tests · doctor CLI · readiness runbook
License
MIT
UNIT-02

AgentForge ATT&CKLens Benchmark

Operational

A reproducible defensive cybersecurity benchmark asking one question: can AI coding agents build secure, uncertainty-aware, MITRE ATT&CK-aligned defensive tooling? Seven agent artifacts, one branch each, scored against a 100-point rubric. Grading covers ATT&CK mapping discipline, prompt-injection resistance, evidence citation, uncertainty handling ("No Clear Mapping"), detection ideas, remediation guidance, and analyst follow-up questions.

  • Cursor100
  • Claude Code98
  • Hermes Nemotron98
  • Codex96
  • Lovable Repaired76
  • Mistral Vibe75
  • Lovable Original40

RUBRIC: 100 PTS · ONE BRANCH PER AGENT · HARNESS RE-RUNS VIA benchmark-all.ps1 · MIT

UNIT-03

Vuln Management Mini Program

A vulnerability management dashboard: full CRUD workflow, KPI cards, search, filtering, and severity states — the paperwork half of remediation, done properly.

  • Python
  • Flask
  • SQLite
  • KPI cards
  • severity states
UNIT-04

Security Log Anomaly Detection

Rule-based plus statistical detection for authentication and network anomaly triage — flagging what deviates, and saying so with numbers.

  • Python
  • pandas
  • NumPy
  • auth events
  • network triage

MITRE ATT&CK® is a registered trademark of The MITRE Corporation.

PANEL 04

Service Record

DOCUMENTATION · ISSUED 2026

Document Dispenser

Pull for full specification Download Resume — PDF

Michael_Kurdi_Resume_2026.pdf · single sheet · no fluff

Operator
Mahmoud "Michael" Al Kurdi
Cert
Security+ ce SY0-701 (01/2025 → 01/2028)
Degree
B.S. IT — Cybersecurity, SNHU, 3.96 GPA
Honors
Summa Cum Laude · Alpha Sigma Lambda

Maintenance Log — Assignments

Employment history
Period Assignment Notes
2025 — NOW Delivery Associate
Fossa Logistics LLC (Amazon DSP) · Charlotte, NC
Route logistics while completing the cybersecurity transition.
2024 — 2025 Courier & Logistics Specialist
USPS · Kannapolis, NC
Federal service standards, chain-of-custody handling.
2015 — 2023 Aviation Security Ops Crew Chief
American Airlines · Charlotte, NC
8 years federally regulated ops — security clearance, CBP badge endorsement, FAA/OSHA/IATA/CBP requirements, recurrent IR & safety/security training, identity validation and access control.
DEC 2025 B.S. Information Technologies
SNHU · Cybersecurity concentration
Conferred Jan 1 2026 · Summa Cum Laude, 3.96 GPA.
JAN 2025 CompTIA Security+ ce
SY0-701
Valid through Jan 7 2028.
PANEL 05

Communications

DIRECT LINES — NO GATEKEEPING
Status CHARLOTTE, NC · OPEN TO REMOTE · AVAILABLE FOR FULL-TIME SOC / SECOPS / IR / DETECTION / SECURITY-AUTOMATION ROLES