Issue #01 · Charlotte, NC · price: free · summer 2026

Mahmoud "Michael" Al Kurdi — Security Operations Analyst

Security Operations Analyst

Eight years running federally regulated aviation security operations for American Airlines — clearance, CBP badge endorsement, incident response drilled on repeat. Now CompTIA Security+ certified with a cybersecurity degree finished summa cum laude and public, testable security projects on GitHub.

every claim on this page maps to a public repo, credential, or document.

See the receipts ↓ Grab the resume (PDF)

Field notes

SOC-track analyst · Charlotte, NC · open to remote
CompTIA Security+ ce (SY0-701) — valid thru Jan 2028
B.S. Information Technologies, Cybersecurity — SNHU, summa cum laude, 3.96 GPA
8 yrs aviation security ops, American Airlines (2015–2023)
Builds reproducible, defensive security tooling — MITRE ATT&CK-aligned
Available now for full-time roles

Security+ ce VERIFIED · SY0-701 JAN 2025 → JAN 2028

keep scrolling — the receipts are stapled below

p.02 — the analyst

Who is this guy?

For eight years — 2015 to 2023 — Michael was an Aviation Security Operations Crew Chief at American Airlines in Charlotte. Federally regulated operations. A security clearance and CBP badge endorsement. International flight operations run under FAA, OSHA, IATA, and CBP requirements, with recurrent incident-response and safety/security training every year.

That job is the foundation: high-accountability documentation, identity validation, and access control — done daily, under real regulators, where sloppy paperwork isn't an option. The habits a SOC wants on day one.

He then converted that discipline into credentials and code: a B.S. in Information Technologies (Cybersecurity concentration) from Southern New Hampshire University — completed December 2025, summa cum laude, 3.96 GPA, inducted into the Sigma Psi chapter of Alpha Sigma Lambda — plus CompTIA Security+ ce (SY0-701), and four public, defense-focused projects.

The through-line: evidence first. Alerts get documented, mappings get cited, uncertainty gets flagged — "No Clear Mapping" is a valid answer, guessing is not.

8 yrsfederally regulated security ops

SY0-701CompTIA Security+ ce · 2025–2028

3.96GPA · B.S. IT cybersecurity · summa cum laude

4public projects — all defensive

Now booking — target roles

SOC Analyst Security Operations Analyst Cybersecurity Analyst Incident Response Analyst Junior Detection Engineer Security Automation

SOC / SecOps

alert triagesecurity monitoringincident documentationlog analysisevidence reviewauthentication eventsDNS investigationremediation planningescalation notes

Cybersecurity

MITRE ATT&CKdefensive securityprompt-injection resistanceaccess controlleast privilegesecurity documentationconfidence scoring"No Clear Mapping" handling

AI / Automation

AI coding-agent evaluationreproducible benchmark designrubric-based scoringprompt architecturesafety rulesacceptance criteriaautomated reporting

Toolbox

PythonGradioJavaScriptNode.jsPowerShellBashGit / GitHubMarkdownJSONYAMLHTML/CSSpytestnpm

p.03 — proof of work

The receipts

four clippings, all public, all defensive. cut them out and check them yourself.

Clipping #01 · shipped to npm

AgentForge

"one spec, many agents"

A configuration framework for agentic AI coding assistants: write the spec once, deploy it to 6 adapter targets — Claude Code, Codex, Gemini CLI, Cursor, Aider, and a generic adapter. Published to npm as @kmitops/agentforge@0.3.1. MIT licensed.

adapter round-trip tests
install smoke tests
doctor CLI + readiness runbook
live public demo

Repo ↗ npm ↗ Live demo ↗

Node.jsnpm6 adaptersMIT

Clipping #02 · reproducible benchmark

AgentForge ATT&CKLens Benchmark

can AI agents build honest defensive tooling?

A reproducible defensive cybersecurity benchmark: 7 AI coding-agent artifacts scored against a 100-point rubric — ATT&CK mapping discipline, prompt-injection resistance, evidence citation, uncertainty handling ("No Clear Mapping"), detection ideas, remediation guidance, analyst follow-ups. One branch per agent; the harness re-runs via benchmark-all.ps1. MIT.

Repo ↗

MITRE ATT&CKPowerShellrubric scoringMIT

MITRE ATT&CK® is a registered trademark of The MITRE Corporation.

Clipping #03 · vuln tracking

Vulnerability Management Mini Program

track it, triage it, close it out

A Python / Flask / SQLite dashboard for vulnerability tracking: full CRUD, KPI cards, search, filtering, and severity states — the remediation-planning workflow a small security team actually runs.

Security Log Anomaly Detection

rules + statistics, not vibes

Python with pandas and NumPy: rule-based plus statistical detection for authentication and network anomaly triage — the log-analysis muscle behind the SOC skill set, written out as running code.

The paper trail

the whole thing, photocopied — PDF at the bottom ↓

Experience

2015 — 2023

Aviation Security Operations Crew Chief

American Airlines · Charlotte, NC

Federally regulated operations — security clearance + CBP badge endorsement
International flight ops under FAA / OSHA / IATA / CBP requirements
Recurrent incident-response and safety/security training
High-accountability documentation, identity validation, access control

2024 — 2025

Courier & Logistics Specialist

USPS · Kannapolis, NC

2025 — present

Delivery Associate

Fossa Logistics LLC (Amazon DSP) · Charlotte, NC

Meanwhile: finished the degree (Dec 2025) and shipped 4 public security projects

Education

B.S. Information Technologies — Cybersecurity concentration

Southern New Hampshire University · completed Dec 2025 · conferred Jan 1, 2026

Summa Cum Laude · 3.96 GPA · Sigma Psi chapter, Alpha Sigma Lambda

Certification

CompTIA Security+ ce (SY0-701)

Issued Jan 7, 2025 · valid through Jan 7, 2028

Grab the PDF resume ↓ Michael_Kurdi_Resume_2026.pdf — print it, staple it, pass it around.

p.05 — back cover · the negative

Write to the editor

Recruiters, hiring managers, security engineers — mail goes straight to Michael. Fastest reply: email. Everything below is a real, working address.

Email kurdi.michael.it@gmail.com Phone (704) 456-8322 GitHub github.com/KM-it-ops LinkedIn mahmoud-michael-al-kurdi Site km-it-ops.github.io

Open to: SOC Analyst · Security Operations Analyst · Cybersecurity Analyst · Incident Response Analyst · Junior Detection Engineer · Security Automation
Charlotte, NC · open to remote · available for full-time roles now.

Mahmoud "Michael" Al Kurdi — Security Operations Analyst MAHMOUD “Michael” AL KURDI