Ahsan Abdullah

Architected and deployed an AI-driven Security Operations Center (SOC) platform within a Proxmox VE–based virtualized lab environment (64GB RAM, 20-Core). Set up a simulated enterprise network environment comprising pfSense Firewall for WAN/LAN segmentation, Windows Server 2022 Active Directory Domain Controller, Windows 11 endpoints, and an Ubuntu 22.04.5 LTS management node.

Key Contributions:

• Deployed and configured Wazuh (SIEM/XDR) for centralized security event monitoring and endpoint-level threat detection.
• Integrated AI-assisted alert triage workflows using Local LLMs (Llama-3 / Qwen) to assist in threat detection and patch recommendations.
• Automated deployment of endpoint security agents across Active Directory Organizational Units (OUs) using PowerShell-based GPO scripts.
• Developed an asset discovery and deployment planner to securely onboard domain-joined systems using least-privilege service accounts.
• Generated Security Configuration Assessment (SCA) reports highlighting failed security checks, with multilingual output support (Arabic and English) in both text and PDF formats.
• Managed platform deployment and monitoring through terminal-based service orchestration.