Welcome
Available for cybersecurity projects

Hi, I'm Abdelrahman Sameh

I secure things for network defense|

Cybersecurity undergraduate focused on network security, Fortinet firewalls, web application security, cryptography, GRC, malware analysis fundamentals, and secure infrastructure configuration.

Contact Me
0+

Years Practical Training

0+

Security Projects

0+

Tools & Technologies

About Me

Building security awareness into systems, networks, and code.

I am a cybersecurity undergraduate at Alexandria National University with hands-on training across network security, Fortinet firewall concepts, security operations, web application security, cryptography, GRC, and secure infrastructure configuration.

My practical work includes traffic monitoring, ACLs, AAA, VPNs, secure authentication, vulnerability testing, incident response, and risk and compliance frameworks. I enjoy translating security requirements into systems that are practical, maintainable, and resilient under real use.

security

Network Security

Focused on ACLs, AAA, OSPF, VPN, VLANs, firewall rules, and secure network validation.

bug_report

Web App Security

Experienced with OWASP ZAP, Semgrep, secure cookies, security headers, and retesting fixes.

policy

GRC Mindset

Comfortable with risk mitigation, compliance awareness, access control, and cyber awareness practices.

groups

Clear Communicator

Arabic native speaker with professional working English for documentation and team collaboration.

Projects

Selected Cybersecurity Work

Security-focused projects covering secure document management, application hardening, and enterprise network design.

secure-vault.local/dashboard

Featured Project

Secure Document Workflow

RBAC + 2FA

Access

JWT auth
Role control

Protect

AES-256-GCM
RSA signature
SHA-256 hash

Verify

Tamper check
Audit logs
PHP MySQL JWT TOTP AES/RSA

Secure Document Vault System

Secure web platform for uploading, storing, encrypting, digitally signing, verifying, downloading, and managing sensitive documents with authentication, authorization, HTTPS, logging, and integrity checks.

passkey
Hash2FARBAC

Secure Authentication System

PHP/MySQL authentication project implementing password hashing, TOTP two-factor authentication, token-based access, protected routes, RBAC, and PDO prepared statements.

PHPMySQLTOTPRBAC
View Project →
DAST: OWASP ZAP
SAST: Semgrep
Fix → Re-test → Verify

Full-Spectrum Web App Hardening

Hardened vulnerable Node.js/Express application using OWASP ZAP, Semgrep, custom rules, remediation mapping, and verification scans after security fixes.

Node.jsExpressOWASP ZAPSemgrepDocker
View Project →
Users Firewall Server ACL + VPN + Syslog

Secure Enterprise Network Design

Cisco Packet Tracer enterprise network simulation using subnetting, OSPF authentication, VLANs, ACLs, AAA with RADIUS/TACACS+, SSH, Layer 2 security, NTP, Syslog, VPN, and Zone-Based Firewall policies.

Cisco Packet TracerOSPFVLANsACLsAAAVPNZPF
View Project →
PHP Rules Findings

SAST Lab 4 — Mutillidae II & Semgrep

Static analysis lab focused on OWASP Mutillidae II, custom Semgrep rules, and detection patterns for SQL injection and reflected XSS in PHP source code.

SASTSemgrepOWASPPHPXSS
View Project →
input.validate()
query.parameterize()
auth.testSuite.run()

SQL Injection Prevention Lab

Node.js, Express, SQLite, and bcrypt lab focused on validating SQL injection mitigation through automated and manual security test scenarios.

Node.jsExpressSQLitebcryptTesting
View Project →
Caesar
Vigenère
Playfair
S-DES

Multi-Layer Cryptography Tool

Interactive web-based encryption and decryption tool that stacks classical ciphers in any order, preserves reversible layers, and runs fully in vanilla JavaScript.

JavaScriptHTML/CSSCryptographyS-DES
View Project →
Experience

Training & practical exposure

Jan 2026 — Feb 2026

IRI — Hands-on Introduction to Malware Analysis

Completed a hands-on training course covering introductory malware analysis concepts and cybersecurity investigation fundamentals.

Malware AnalysisInvestigationFundamentals

Jun 2025 — Dec 2025

DEPI / MCIT — Fortinet Cybersecurity Engineer Trainee

Completed an intensive six-month scholarship focused on cybersecurity fundamentals, network security, FortiGate configuration, traffic monitoring, incident handling, and threat mitigation.

FortinetNSE 4NSE 5CCNA

Jul 2025 — Aug 2025

NTI / ITIDA — Network Security Summer Training

Completed 120 hours of training covering CompTIA Security+ SY0-701 concepts, Cisco network security fundamentals, labs, simulation tools, virtual machines, soft skills, and freelancing.

Security+CiscoLabs

Jul 2024 — Aug 2024

Egyptian Petrochemical Company — Network Security Trainee

Gained practical exposure to network security, system administration, database management, servers, Linux/Windows environments, virtualization, access control, and infrastructure hardening.

InfrastructureLinux/WindowsHardening
Education & Certificates

Academic foundation

Oct 2023 — Oct 2027

B.Sc. Computer and Data Science — Alexandria National University

Cybersecurity Program. Focused on systems security, threat detection, risk mitigation, digital forensics, security policies, compliance, and cyber awareness.

CybersecurityDigital ForensicsRisk Mitigation

2025 — 2026

Certificates & Training Highlights

  • AWS Academy Graduate — Cloud Foundations, Apr 2026
  • Fortinet Cybersecurity Engineer — DEPI / MCIT, Jun 2025 — Dec 2025
  • CCNA Certifications — Cisco Networking Academy, Jun 2025 — Oct 2025
  • Network Security Training Certificate — NTI / ITIDA, 27 Jul 2025 — 21 Aug 2025
  • ECPC Contest — Egyptian Collegiate Programming Contest, Jul 2025
AWSFortinetCiscoNTIECPCProblem Solving

2023 — Present

Leadership & Volunteering

  • Cybersecurity Member — HackerRank Campus Club, AUFS
    Contributed to cybersecurity team activities, awareness efforts, and strategy development for information security events.
  • Organizer — Pivots ANU
    Supported the organizing committee in planning and executing university events, improving teamwork, coordination, and communication skills.
Cybersecurity CommunityEvent OrganizationTeamworkCommunication
Skills & Expertise

Technical toolkit

Cybersecurity

lan Network Security
monitoring Security Operations
encrypted Cryptography
policy GRC & Risk Assessment

Security Tools

shield_lock Fortinet / FortiGate
router Cisco, ACLs, AAA
radar Wireshark & Syslog
bug_report OWASP ZAP & Semgrep

Programming

Python Python
JavaScript JavaScript
Node.js Node.js
database PHP, SQL, MySQL

Platforms

Docker Docker
Git Git & GitHub
terminal Linux / Windows Server
cloud AWS Cloud Foundations
Get In Touch

Let's build secure systems together.

Open to cybersecurity projects, internships, training opportunities, and collaboration around secure networks, web app security, and GRC documentation.

location_on

Location

Alexandria, Egypt

call

shield_lock Please do not send passwords, private keys, OTP codes, ID numbers, or any sensitive personal data. Messages are sent through the contact form without showing a CAPTCHA page.

I usually respond within 24 hours. Feel free to reach out for cybersecurity projects, internships, or collaboration opportunities.