Mahmoud (Michael) Al Kurdi

Junior Security Analyst · Security Operations · IT Risk

Charlotte, NC · (704) 456-8322 · kurdi.michael.it@gmail.com · LinkedIn · GitHub · Portfolio

SUMMARY

B.S. Information Technologies (Cybersecurity concentration), Summa Cum Laude, 3.96 GPA, and CompTIA Security+ (SY0-701). Eight years in federally regulated aviation security operations — identity validation, access control, and incident documentation — plus shipped Python projects in log anomaly detection, phishing classification, and vulnerability tracking. Targeting junior security analyst, security operations, vulnerability management, and IT risk roles in Charlotte and remote.

SKILLS

Security operations: log review, rule-based detection, alert triage, incident documentation, MITRE ATT&CK mapping, IAM / least privilege, vulnerability tracking

Risk & governance: NIST CSF, CIS Controls, HIPAA-aligned control briefs, Responsible AI coursework

Systems: Windows hardening / Group Policy, TCP/IP, VLANs, Linux fundamentals, cloud concepts

Automation: Python, pandas, scikit-learn, Flask, SQL / SQLite, Git, GitHub Actions

Labs / projects only: Packet Tracer, GNS3, Docker, REST APIs — no claimed production SIEM tenure

SELECTED PROJECTS

Security Log Anomaly Detection

Python · github.com/KM-it-ops/security-log-anomaly-detection

• Rule-plus-statistics detector for brute force, port scans, off-hours sensitive-file access, unknown IPs, and privilege-escalation patterns.
• Baseline-profiled auth failures and event volume; flagged spikes with z-score > 2.5 and wrote severity-ranked JSON alerts.

Phishing Email Classifier

Python / scikit-learn · github.com/KM-it-ops/phishing-email-classifier

• URL, PII, and typosquat features plus TF-IDF into a 207-dimension vector; Random Forest with 80/20 split and 5-fold cross-validation.

VulnTrack — Vulnerability Workflow Dashboard

Flask / SQLite · github.com/KM-it-ops/Vulnerability-Management-Mini-Program

• CRUD tracker with severity KPIs, status workflow, search-filter, and a small REST API.

Also shipped: AgentForge (npm @kmitops/agentforge) and PromptRig (offline eval / safety constraints) — detection and vuln workflow, not a substitute for operations tenure.

EXPERIENCE

American Airlines · Charlotte, NC

• Operated in a federally regulated aviation environment with CBP badge endorsement; enforced identity validation and access control for international flight operations.
• Documented incidents, inspections, and exceptions under FAA / OSHA / IATA workflows; completed recurrent safety and security training.
• Held teammates to high-accountability procedures — the same discipline banks and healthcare security teams expect in ticket notes.

Fossa Logistics (Amazon DSP) · USPS · Charlotte / Kannapolis, NC

• Completed the degree and security portfolio while running time-critical routes; kept documentation and exception handling tight under hard deadlines.

EDUCATION & CERTIFICATIONS

Southern New Hampshire University · Summa Cum Laude · GPA 3.96 · Alpha Sigma Lambda · repeated President’s List

Cyber coursework: Foundations, Networking, Network Security, Cyber Defense, Legal/Human Factors, Systems Security, Risk Management. AI electives: Responsible AI, AI in Practice.

CompTIA Security+ ce (SY0-701) · Issued Jan 7, 2025 · Valid through Jan 7, 2028