Wissam El Labban

Web Applications Penetration Tester - Internship

May 2022 - Aug 2022 · 4 months

• Applied mitigations for cross site scripting, command injection, and credential brute forcing to vulnerabilities, and improved security in web applications through refining front end code, reducing vulnerability risk to a chance of 10% and mitigated 5 out of 7 discovered vulnerabilities.
• Introduced and successfully implemented processes for testing company web applications in an isolated environment, processes were verified through testing the open-source ModSecurity Web Application Firewall using both Whitebox and Blackbox testing techniques.
• Implemented a containerized system for pen testers, to facilitate a more efficient and streamlined testing of the Web Application firewall at Digital Dubai and quick discovery of the primary root causes of vulnerabilities.

Security Operations Center Analyst - Internship

Jun 2021 - Aug 2021 · 3 months

• Increased reporting of potential threats by 20% through investigations of reported log data that directly correlated with incidents recognized by SIEM use cases.
• Utilized the CyberKill chain and MITRE ATT&CK framework to understand phases of attacks by viewing logs from the IPS (intrusion prevention system), IDS (intrusion detection system), antivirus, VPN, SOAR/XSOAR (security orchestration, automation, and response), EDR (endpoint detection and response), and email gateway servers leading to increased monitoring for 50% of the distributed network.
• Expanded SIEM knowledge by using Splunk to view alerts triggered by the Sysmon app in single hosts to investigate root-cause analysis and assist in troubleshooting, leading to the implementation of a system that can completely monitor a host for 90% of all known attacks and security violations.
• Developed valuable alert rules for assets and servers covered by the Splunk SIEM, improving its overall reporting by 20% and enabling management to more accurately triage the protection of assets.