I'm a final-year DFCS student in Islamabad, Pakistan, specializing in network defense, SOC operations, and security automation. I learn by building — every concept I study gets turned into a lab, a tool, or a report. Currently pushing toward my first SOC Analyst L1 role while sharpening offensive security skills on the side.
Currently building: a full home SOC stack (Suricata IDS + Splunk SIEM + Wazuh + n8n SOAR automation) Currently studying: CompTIA Security+ (SY0-701) I build practical Python security tools — scanners, detectors, and report generators Exploring: bug bounty hunting, threat intel / OSINT reporting Ask me about: network security labs, incident response (NIST SP 800-61), or Suricata/Splunk troubleshooting Reach me: ahmedrazasec@gmail.com Tech & Tools
Featured Projects Project What it does Home SOC Lab 30-lab GNS3 build culminating in a full monitoring stack (Suricata IDS, Splunk SIEM, rsyslog, IPsec VPN, network hardening) + NIST SP 800-61 incident response report CSOC Automation Cloud-hosted (Oracle ARM) automated SOC pipeline — Wazuh, n8n, pfSense, VirusTotal & Slack integration for real-time alert triage YARA Malware Detector Detects modern threat families (Lumma Stealer, AsyncRAT, Cobalt Strike) with MITRE ATT&CK enrichment NetRecon Python-based TCP port scanner with banner grabbing, service detection & JSON/CSV/TXT reporting WebPentest Automated web app pentesting tool — SQLi, XSS, directory bruteforce, security headers, HTML reports scanner.py Passive WordPress security auditor generating client-ready PDF audit reports NAVTTC Scam OSINT Report Full threat intelligence writeup on a phishing/impersonation campaign, with MITRE ATT&CK mapping(Update the # links to your actual repo URLs once pinned)
GitHub Stats
Currently Working Toward CompTIA Security+ (SY0-701) — booked / in prep Landing a SOC Analyst L1 role Bug bounty hunting (Bugcrowd / Intigriti) Reviving the OWASP Rawalpindi chapter"Building tools that automate security work — not getting automated out of it."