Mohammed Alrashid · Security Engineer
Download PDFResume
Security Engineer with experience securing a building automation platform across GCP, Azure, Entra ID, and on-premises infrastructure. Own vulnerability management, IAM, incident response, and platform risk reviews. Interested in penetration testing and zero trust security.
Experience
Security Engineer
PassiveLogicFull-timeCurrent
- Vulnerability management: Own authenticated scanning with Rapid7 InsightVM across cloud, server, and endpoint environments; track remediation SLAs and coordinate patch campaigns through Jamf and Intune.
- Cloud security: Use Wiz across GCP and Azure to identify and close attack paths involving public exposure, static credentials, and excessive IAM permissions; consolidate findings into a shared remediation queue.
- Identity and access: Manage SAML and OIDC federation, SCIM provisioning, workforce identity federation, and Conditional Access in Entra ID and GCP, including guest access and MFA.
- Incident response: Investigate phishing, business email compromise, account compromise, and token or session abuse using Microsoft Defender for Office 365; lead response through root cause analysis and postmortems.
- Platform risk: Review internally developed platforms before release for unsafe remote execution, credential handling, and excessive privilege; authored a tiered framework for cloud, OAuth consent, secrets, and infrastructure as code controls.
- Network security: Design and operate firewall failover, VLAN segmentation, site-to-site and remote access VPNs, and availability monitoring; validate failover under live conditions.
- Audit support: Own security control evidence and audit responses supporting SOC 2 and GDPR requirements.
Security Intern
PassiveLogicInternship
- Security baselines: Established the company's first documented cloud security controls across GCP, Azure, and Microsoft Exchange.
- Security operations: Assessed cloud and network security posture, managed vulnerabilities, and administered IAM in GCP and Azure Active Directory toward least privilege.
Education
B.S. Cybersecurity and Network Management
Minor in Computer Science
Weber State University
Ogden, UT
Technical skills
Cloud and identity
- GCP
- Azure
- Entra ID
- SAML
- OIDC
- SCIM
- Conditional Access
Vulnerability and risk
- Rapid7 InsightVM
- Wiz
- CVSS
- CSPM
- SAST / SCA
- Platform risk reviews
Security operations
- Incident response
- Microsoft Defender for Office 365
- SPF / DKIM / DMARC
- Log analysis
- Jamf
- Intune
Network security
- VLAN segmentation
- Firewall policy
- High availability
- WireGuard
- Site-to-site VPN
- DNS
- TLS / PKI
Platforms and code
- Linux
- Windows
- macOS
- Bash
- Python
- SQL
- C++
- Terraform
- Git
- Docker
- Proxmox
Governance
- SOC 2
- GDPR
- Security policy
- Control evidence
- Audit support
Languages
- English (fluent)
- Arabic (fluent)
Want to talk about a security role or project?
Get in touch