SA / PERSONAL PORTFOLIOENGINEERING  ·  DEFENSE  ·  SECURITY
SENIOR SECURITY ENGINEER / UAE

Making complex
systems harder
to break.

I'm Saleh Abou Hassan. I engineer practical security across enterprise endpoints, identity, cloud and infrastructure — then validate that the controls actually work.

THE APPROACH

Understand the risk. Engineer the control. Validate the outcome.

Portrait of Saleh Abou Hassan in a dark suit
SALEH ABOU HASSAN
SECURITY ENGINEER
↗
SECURITY IS A
DESIGN DECISION.
SCROLL TO EXPLORE BUILD / DEFEND / IMPROVE
SECURITY ENGINEERING
/
INCIDENT RESPONSE
/
SECURE INFRASTRUCTURE
/
OFFENSIVE LABS

01 / SELECTED WORK

Real problems.
Practical security.

A selection of hands-on engineering, investigations, infrastructure design and controlled lab work. Technical detail without exposing private environments.

01 / ENDPOINT BASELINE
SECURITY CONTROLS⌁
Policy validation
01Baseline configuration✓
02Application control✓
03Behavior verification→
Illustrative interface · Not production data
ENGINEERING / ENTERPRISE01

Endpoint security
& hardening.

Designing and validating Windows endpoint controls through Microsoft Intune, Defender and application-control policies.

+
SIGNAL / CONTEXT / RESPONSE
INVESTIGATE02 / 04
BLUE TEAM / INVESTIGATION02

Threat investigation
& response.

Analyzing endpoint telemetry, processes and file evidence to distinguish legitimate activity from threats.

03 / NETWORK BOUNDARIESDEVICEIDENTITYSERVICECONTROLLED ACCESS · CONCEPTUAL FLOW
NETWORK / INFRASTRUCTURE03

Identity-aware access
& infrastructure.

Secure connectivity and access-control workflows using FreeRADIUS, VPN, Docker and Proxmox.

AUTHORIZED RESEARCH LAB
01 Reproduce & observe[ lab ]
02 Analyze root cause[ lab ]
03 Review mitigations[ lab ]
_ █
ISOLATED ENVIRONMENT / NON-PRODUCTION
OFFENSIVE SECURITY / LAB04

Penetration testing
& vulnerability research.

Hands-on authorized labs covering crash analysis, debugging, exploit fundamentals and defensive mitigations.

* Visuals are illustrative. Project descriptions are deliberately generalized; no private customer data, telemetry, confidential systems or unverified results are published.

02 / CORE EXPERTISE

More than
tools.

Strong security comes from knowing how systems behave — and where assumptions fail.

01

Enterprise security engineering

Microsoft Defender for Endpoint, Intune, Entra ID, endpoint configuration and security policy validation.

↗
02

Threat detection & incident response

Endpoint investigation, alert triage, security telemetry, event correlation and PowerShell-assisted analysis.

↗
03

Network & cloud security

VPNs, identity-aware access, FreeRADIUS, virtualization, Microsoft 365 administration and cloud security practices.

↗
04

Offensive security & cyber GRC

Authorized penetration testing labs, vulnerability analysis, risk assessment methods and governance fundamentals.

↗
MICROSOFT DEFENDERINTUNEENTRA IDPOWERSHELLFREERADIUSPROXMOXLINUXNETWORK SECURITY

03 / THE PERSON

Curious by nature.
Precise by practice.

My work lives where engineering decisions become security decisions.

I’m a Senior Security Engineer with hands-on work across Microsoft security tooling, infrastructure access, endpoint investigations and system hardening. I value clarity over noise: understand the environment, investigate the risk, build a control and test it properly.

Outside day-to-day defensive engineering, I explore responsible offensive testing in lab environments and the connection between technical controls, risk and governance.

01ENGINEER FOR REAL CONDITIONS
02VALIDATE BEFORE DECLARING SUCCESS
03KEEP LEARNING, KEEP QUESTIONING

04 / PROFESSIONAL DEVELOPMENT

Proof over
promises.

Certifications belong here only when earned and verifiable. This section is ready for your actual credentials, issuer details, badges and verification URLs.

VERIFIED CREDENTIALS✳

Credentials in preparation

Verified certifications and training will be published here when the details are provided. No placeholder badges or invented certificates.

CURRENT LEARNING AREAS
Penetration TestingCyber GRCCloud Security
05 / LET'S CONNECTOPEN TO SECURITY CONVERSATIONS ↗

Let's make systems
more resilient.

Interested in security engineering, practical defense and thoughtful technical challenges? Let’s connect.