CYBERSECURITY ENGINEER · SYSTEMS THINKER

Security is a
practice, not a
product.

I’m Amirsaeed Iloukhani — a cybersecurity engineer focused on designing resilient infrastructure, making complex systems legible, and turning security knowledge into practical action.

TRUST BOUNDARY
OBSERVE · ADAPT · DEFEND
25°12' N
55°16' E
NETWORK SECURITY ✦ SECURITY ARCHITECTURE ✦ LINUX SYSTEMS ✦ DETECTION ENGINEERING ✦ CYBERSECURITY EDUCATION ✦

01 — EXPERTISE

The most reliable security posture is built into the system.

With over a decade across network security, Linux infrastructure, and technical education, I work where architecture meets operations.

My work is guided by a simple principle: security has to hold up in real environments—not just in a diagram or a slide deck.

/ 01

Secure architecture

Designing segmented, resilient networks with security treated as a first-order constraint.

Explore discipline ↗
/ 02

Detection & response

Turning telemetry into useful signals through monitoring, investigation, and practical detection.

Explore discipline ↗
/ 03
›_

Systems engineering

Hardening Linux systems, securing remote access, and solving the operational details that matter.

Explore discipline ↗
/ 04

Knowledge transfer

Building clear, scenario-led learning experiences for technical teams and future practitioners.

Explore discipline ↗

02 — WORKING PRINCIPLES

Clarity is a
security control.

Good security decisions emerge from seeing the system clearly: its assets, assumptions, dependencies, and failure modes.

  1. 01

    Begin with the real system

    Establish expected behavior before reaching for a configuration change. Context is the first layer of defense.

    ↘
  2. 02

    Test competing hypotheses

    Work from evidence. A plausible explanation is not yet a root cause.

    ↘
  3. 03

    Make the smallest sound change

    Favor precise, reversible interventions—and understand their security implications.

    ↘
  4. 04

    Leave the system stronger

    Verify the result, document the lesson, and turn a one-time fix into durable practice.

    ↘

03 — RÉSUMÉ / CREDENTIALS

Learning that
connects to practice.

A selected record of verified course completions. These complement more than a decade of hands-on work across cybersecurity, network security, Linux systems, and technical education.

2024

EC-COUNCIL

Advanced Open Source Intelligence and Privacy

Certificate of Achievement · Successfully completed
01
2024

TRYHACKME

DevSecOps Learning Path

Certificate of Completion · Successfully completed
02
2023

EC-COUNCIL LEARNING

Linux Command Line - From Zero to Expert

Course completion
03
2023

EC-COUNCIL LEARNING

Hands-on Linux for DevOps & Cloud Engineers

Course completion
04

ADDITIONAL PROFESSIONAL DEVELOPMENT

AI Driven Network SecurityChatGPT for Incident Detection & ResponseComputational Intelligence for CybersecurityCybersecurity for Robotics & Autonomous SystemsIntroduction to IoT HackingVirtual Machine ForensicsGenerative AI Workplace PolicyCybersecurity Leadership

04 — PURPLETRACE / WEEKLY SCENARIOS

Learn the whole
attack story.

A weekly, lab-safe series that follows one realistic incident from initial access to evidence, containment, and a durable fix. Built to show both technical depth and how you think.

01

Simulate

Set up a safe, isolated environment and define the attack objective.

→
02

Investigate

Collect artifacts, analyze logs, and reconstruct what occurred.

→
03

Defend

Detect the behavior, contain it, and validate the response.

→
04

Harden

Fix the root cause, document the control, and prove the change.

FIRST EPISODEWeek 01

Credential access on a segmented Linux environment

“The access log tells only half the story.”

A scenario framework for a contained lab: map the attack path, preserve evidence, write detections, and close the gap without publishing unsafe operational details.

Research the signal ↓

05 — GLOBAL CYBER WIRE

News worth
studying.

A 200-item, source-linked research board spanning incidents, vulnerability research, threat intelligence, AI security, and Black Hat coverage.

Loading research board…

06 — THE LAB

Always
learning in
both directions.

Security evolves through curiosity: building, breaking, observing, and teaching. I keep an active practice across defensive engineering, offensive methods, and the systems that connect them.

View field notes ↗
ACTIVE PRACTICEBlue
↔
Purple
DEFEND / TEST / LEARN
TOOLS & TERRITORY

Networks
Linux
Firewalls
SIEM
Forensics

BEYOND THE CONSOLE

Movement, music, language, and a discipline for lifelong learning.

07 — FIELD NOTES

Sharing what
stands up to reality.

I’m developing technical, scenario-driven content for people who want to understand security beyond the buzzwords.