Mahmoud Dawood

Cybersecurity Instructor & Consultant

Freelancer.com • Freiberufler

Dec 2020 - Present • 5 yrs 8 mos

Delivered hands-on cybersecurity training and consulting covering penetration testing, network security, and SOC operations. Deployed and configured Wazuh SIEM in enterprise environments with custom detection rules mapped to the MITRE ATT&CK framework, including custom log decoders and multi-source log correlation for improved threat detection accuracy. Performed vulnerability assessments and penetration tests using Kali Linux, Nmap, Metasploit, and industry-standard methodologies to identify and remediate security gaps across network and application layers. Conducted STRIDE-based threat modeling for infrastructure projects, producing formal documentation and deployment guides used for security review and compliance purposes. Hardened Linux and Windows systems against common attack vectors, applying security best practices aligned with CIS benchmarks and Zero Trust principles. Delivered instructor-led training in CompTIA Security+ (SY0-701), covering core domains including cryptography, access control, threat management, and security operations — combining technical depth with clear, practical explanations for learners at all levels. Produced professional technical documentation, including security assessment reports, threat model appendices, and deployment guides, tailored for both technical and executive audiences.