Red Teaming · Threat Modeling · DFIR · SOC/SIEM Operations · GRC· PhD Cybersecurity Researcher · Based in Coimbra, Portugal

LinkedIn: in/bilalspeaks | Certifications: CISM, CEH, CHFI, SSCP | Focus: Penetration Testing, Red Team, GRC

10+ years of hands-on cybersecurity experience in multiple cybersecurity domains, with a primary focus on authorized penetration testing across web applications, networks, APIs, and mobile platforms. Comfortable across the full testing lifecycle: reconnaissance, exploitation, post-exploitation, and remediation-focused reporting. Tooling includes Burp Suite, Metasploit, Nmap, Nessus, and custom scripting.

Also active across complementary security domains that strengthen the offensive work above.

SOC, SIEM & Detection Engineering. Led detection-engineering operations using Splunk and Microsoft Sentinel; MITRE ATT&CK-aligned detection logic and SOAR-driven incident response.

GRC, Governance, Risk & Compliance. Risk assessments and control frameworks aligned to ISO 27001, NIST CSF, GDPR, NIS2, DORA, and PCI DSS.

DFIR, Digital Forensics & Incident Response. Forensic analysis using Autopsy, EnCase, FTK, and Belkasoft; mobile forensics, malware analysis, and phishing investigations.

Threat Intelligence & OSINT/DARKINT. OSINT, SOCMINT, and dark-web intelligence analysis, IOC development, and APT tracking.

Research. PhD researcher in Cybersecurity at Universidade de Coimbra (satellite ADS-B security), with published research on Android stealth rooting and ML-based malicious app detection.

Offensive Security: Penetration Testing, VAPT, Red Teaming, Burp Suite, Metasploit, Nmap, Nessus

Detection & Response: SIEM, Splunk, Microsoft Sentinel, SOAR, Threat Modeling

GRC & Frameworks: ISO 27001, SOC 2, NIST CSF, GDPR, NIS2, DORA, PCI DSS

Forensics: Autopsy, EnCase, FTK, Belkasoft

AI Security: OWASP Top 10 for LLMs

VAPT-Penetration-Testing-Framework. End-to-end VAPT framework: methodology, rules of engagement, checklists, CVSS scoring, reporting & remediation tracking.

offensive-penetration-testing-notes. Personal study notes and topic tracker from ongoing penetration testing coursework.

Cybersecurity-GRC-Compliance. GRC program repo: governance policies, risk register, and control mappings for ISO 27001, SOC 2, and NIST CSF.

AI-LLM-Security-Pentest-Guide. Practical guide to AI/LLM security testing based on the OWASP Top 10 for LLM Applications (2025).

SOC-Security-Operations-Center. SOC framework: monitoring, detection engineering, alert triage, incident response playbooks, and SIEM use-case management.

CISM, CEH, CHFI, SSCP, arcX CTI Analyst

LinkedIn: in/bilalspeaks Location: Coimbra, Portugal

Building and testing systems responsibly, for authorized and educational use.