Hello! I am

Ameen Siddiqui

~/security $ |

A passionate Cybersecurity Engineer with a knack for problem-solving and innovation. My experience spans IT support, cybersecurity engineering, and project management. I'm eager to contribute my skills to secure and strengthen technological landscapes.

View my CV
Ameen Siddiqui AS

My Projects

A Collection of Cybersecurity and Coding Projects

Phishing Intelligence Automation System

Developed and deployed a fully automated email-based phishing analysis pipeline, triggered by messages sent to phish@company.com. Engineered deep inspection of attachments using VirusTotal, Google Safe Browsing, SPF/DKIM validation, and hidden URL/image extraction, all containerized with Docker for 24/7 autonomous triage and threat scoring.

Phishing | DKIM | SPF | Google Safe Browsing | Virus Total | Uptime Monitor | Docker

(Freelance) IT & Cybersecurity Policy Framework

Spearheaded the design and implementation of a company-wide cybersecurity governance framework aligned with ISO 27001 and NIST CSF standards. Collaborated with stakeholders to establish asset classification, access control, endpoint security, incident response, policy drafting, rollout, and change management as Head of IT & Cybersecurity.

Freelance | NIST CSF | ISO 27001 | CIS | EDR | DNS | IDS/IPS | Policy Development

Mini Splunk Lab

Built a lab simulating a corporate environment with Splunk Enterprise, Active Directory, and Windows endpoints, configured systems for advanced event logging, and executed Atomic Red Team attacks for detection and analysis.

Splunk | Sysmon | Active Directory | Atomic Red Team | SIEM | Forensics

VAPT Report

Created a VAPT report by following OWASP guidelines, assessing vulnerabilities using OpenVAS, and documenting findings with actionable recommendations.

VAPT | OWASP | OpenVAS | Nikto | Nessus

Risk Assessment Report Course Project

Conducted a detailed risk analysis of Instagram's security framework using NIST and ISO 27001 standards.

NIST | ISO 27001 | Risk Assessment

Network Intrusion Detection System

Built a lightweight NIDS on a Raspberry Pi to detect and log malicious traffic in real time using Python and Scapy.

Scapy | Python | Raspberry Pi

WordPress Security

Configured WordPress with WAF, anti-malware, HSTS, brute-force prevention, and CSRF protection to enhance security.

WordPress | WAF | HSTS | CSRF | Brute Force Prevention

Active Directory Home Lab

Built an Active Directory Home Lab from scratch. Configured Users, Groups, and Policies.

Active Directory | Windows Server | User Group Policies | Installation and Configuration

MiniHomeLab

A self-hosted home lab using Proxmox for virtualization, WireGuard for secure remote access, OpenMediaVault for NAS storage, Uptime Kuma for monitoring, and PiHole for ad-blocking.

WireGuard | PiHole | OpenMediaVault | Uptime Kuma | Docker

Medical Health Records Management

A Java-based OOP project for managing and standardizing medical health records. It processes raw health data (e.g., BMI, blood pressure, cholesterol) from input files, maps metrics into predefined categories, and outputs standardized formats for analysis.

(Associated with ADU) | Java OOP

UDP Based Health Monitoring and Load Balancer

UDP Based Health Monitor using Java OOP.

(Associated with ADU) | Java OOP | UDP

Sumo Arduino Robot

Developed a competitive robot using Arduino UNO and motor drivers, designed to push opponents out of a designated area.

(Associated with ADU) | Arduino UNO | IoT

Finance Tracker

FinTracker is a simple, easy-to-use personal finance management tool designed to help users manage their income, expenses, savings, and spending goals.

(Associated with ADU) | Python

Pizza Ordering System

An interactive console-based application that simulates a real-world pizza ordering experience. Allows users to select from a variety of pizzas, sizes, and toppings, and provides a clear order receipt with a total cost calculation.

(Associated with ADU) | Python

My Certificates

Recognitions and Achievements in Cybersecurity

EC-Council – Project Management for Cybersecurity Professionals Cisco – Industrial Cybersecurity Essentials TCM – Practical Ethical Hacker Cisco – CyberOps Associate Cisco – CCNA+ Introduction to Networks Google Cybersecurity Professional TryHackMe – Cybersecurity Engineer Path TCM – Linux 101 Fundamentals Cisco – Intro to Cybersecurity Certificate EC-Council – Network Defense EC-Council – Pentesting Fundamentals Google Developers Student Lead Graduation Fortinet – NSE1, NSE2

My Skills

Technical Expertise and Tools

Security Engineering & Blue Team Operations

SIEM & Log Pipelines: Wazuh, Splunk, centralized ingestion Log Analysis: Windows Event Logs, Sysmon Incident Response & Triage: alert validation, containment, reporting Detection Engineering: correlation & tuning, custom detections Detection Testing: Atomic Red Team simulations Endpoint Hardening: Windows, Linux baselines

Security Automation & Infrastructure

Automation & Scripting: Python, PowerShell Security Pipelines: API integrations, automated threat scoring Containerization: Docker Virtualization & Labs: Proxmox Ops & Reliability: uptime monitoring, operational checks Storage / Backup: NAS concepts, resilience planning

Vulnerability, Risk & Governance

Vulnerability Assessment: OpenVAS (Greenbone), Nikto Risk Management: risk assessment, risk register Frameworks: NIST CSF, ISO 27001, OWASP Top 10 Policy Development: AUP, access control, IR, backups Documentation: reports, diagrams, checklists, playbooks

Email & Identity Security

Phishing Analysis: header review, URL inspection, attachment triage Email Authentication: SPF, DKIM, DMARC Identity & Access: Active Directory users, groups, GPO Secure Remote Access: Zero-Trust approach, VPN-based access

Network & Platform Security

Network Monitoring: Wireshark Packet Work: Scapy IDS/IPS: Suricata, Snort Firewalls: Fortinet, pfSense VPN: WireGuard, Twingate Web Hardening: OWASP Top 10, WordPress security controls Edge & Web Security: Cloudflare (WAF, HSTS, attack surface reduction)

Offensive & Validation Tools (Used for Testing)

Web Testing: Burp Suite Exploitation Lab: Metasploit (Meterpreter) Password Auditing: John the Ripper Brute-force Testing: Hydra

Achievements & Recognitions

Technical Achievements

Innovation Hackathon — 1st Place

Secured First Place in CyberGuardians Track, hosted by Zayed University.

TryHackMe — Top 5% Globally

Ranked in the top 5% globally with 20+ rooms completed across Pentesting, Security Engineering, and SOC pathways.

CTF — 3rd Place

Secured 3rd place at the prestigious GSEC CTF, demonstrating expertise in incident response using Wazuh and SIEM analysis.

College of Engineering — ADU

Awarded for developing a Network Intrusion Detection System (NIDS) on Raspberry Pi, recognized as the best project among 5 competing cyber/non-IoT solutions.

Leadership & Community Impact

Google Developers Student Clubs

Honored for exceptional leadership in hosting one of the largest academic tech events in the country, fostering collaboration and inclusivity.

Let's Connect!