العربية
Portrait of Muhannad Alzughaibi

Recon.Exploit.Contain.

Cyber security professional with hands-on experience in SAP application support, SAP Basis administration, and IT operations. Bachelor’s degree in cyber security with certifications including CompTIA Security+, eLearn Security Junior Penetration Tester, and INE Certified Cloud Associate. Skilled at troubleshooting complex technical issues, monitoring systems for security threats, and producing clear documentation that keeps teams running smoothly.

Download CVEmail me
Certified
  • Security+
  • eJPT
  • INE Cloud Associate
Reconnaissance

Target profile:the defender.

Name
Muhannad Mohammed Alzughaibi
Role
Cybersecurity, SAP Basis
Location
Riyadh, Saudi Arabia
Languages
Arabic, English
Status
Open to full-time roles

Cybersecurity and SAP Basis professional based in Riyadh. I work as an Application Support Specialist at Arabian Mills, after 3 years as an IT Specialist at Abdullah Al-Hathloul Company. My toolkit spans offensive security, digital forensics, network monitoring, SAP administration, and cloud infrastructure protection.

Years experience
4+
Certs & training
6
Top GPA
4.73/5
Degrees
2
Exploitation

I think likean attacker.

To defend a system you have to know how it breaks. I assess web, network, and API attack surfaces, then close what I find.

  • Web applicationsPenetration testing
  • Networks & APIsSecurity assessments
  • Cloud workloadsSecure cloud design
  • EndpointsHardening, OS updates
Detection

Nothing movesunnoticed.

  1. 09:41:02HIGHSuspicious login burst on HR portal
  2. 09:41:05MEDCorrelating with SAP SuccessFactors audit log
  3. 09:41:09MEDSource isolated, sessions revoked
  4. 09:41:15OKPlaybook complete. Root cause documented.
Illustrative output, not real scan data

Triage, containment, and rapid playbook execution. Evidence analysis and threat monitoring when something gets through.

Containment

Keeping criticalsystems stable.

  1. Current role

    Application Support Specialist

    Arabian Mills

    Jul 2025 - PresentSaudi Arabia, on-site

    • Technical and functional support for SAP SuccessFactors (HCM) and SAP Material Management (MM): login problems, transaction errors, data inconsistencies.
    • SAP Basis administration: user and role management, system monitoring, and transport/change management to keep the landscape stable and secure.
    • Partner with HR to troubleshoot system issues and improve workflows; train users to cut repeat tickets.
    • Structured documentation of recurring issues and resolutions.

  2. IT Specialist

    Abdullah Abdulrahman Al-Hathloul Company

    Dec 2021 - Dec 2024Saudi Arabia, on-site

    • End-to-end IT support: software and OS updates, hardware setup, technical issues.
    • Implemented security updates and patches to reduce vulnerability exposure.
    • Trained employees on internal systems and tools.
Forensics

Evidenceon file.

Every certification links to its public verification record.

Training

  • Analyzing Cybersecurity Incident ResponseSTC, 7 hrs, Mar 2025No public link
  • Security OperationsISC2, 8 hrs, Jan 2025No public link
  • Introduction to Cybersecurity EssentialsIBM, 12 hrs, Jan 2025Verify Introduction to Cybersecurity Essentials
Projects

Built,not just studied.

Things I've designed, built and run outside the day job.

CYSRUX

Network vulnerability scanner

Personal project, Nov 2024, Raspberry Pi

A portable scanning tool deployed on Raspberry Pi hardware. It identifies vulnerabilities on connected devices and gives mitigation recommendations for different network environments, built for field audits.

  • Python
  • Raspberry Pi
  • Nmap
  • CVE APIs
  • Port scanning
  • Automated reporting
$ python cysrux.py --target 192.168.1.0/24 --reportScanning 256 hosts on local subnet...✓ 12 active hosts identified! CVE-2023-4966 detected: Citrix Bleed (CRITICAL)→ Applying mitigation playbook...✓ Playbook executed. Patch recommended.
Illustrative output, not real scan data

  1. Subnet discovery

    Scans local subnets and identifies active hosts.

  2. Service mapping

    Maps open ports to the services behind them.

  3. CVE matching

    Cross-references findings against CVE databases.

  4. Mitigation playbooks

    Outputs automated, actionable fixes.

More projects

  1. CertiGoo

    School certificate portal, 2026

    A multi-tenant portal where schools upload student report-card PDFs and students or parents retrieve them by ID number. Self-hosted on Proxmox behind Cloudflare, OPNsense, Traefik and a Kong API gateway.

    Every upload is antivirus-scanned with ClamAV, each school is isolated, and admin logins use two-factor authentication.

    • FastAPI
    • PostgreSQL
    • Paperless-ngx
    • ClamAV
    • Kong
    • Proxmox
    • Next.js

  2. Adeya

    WhatsApp azkar bot, 2026

    A WhatsApp bot that sends subscribers morning and evening azkar timed to their city's prayer times, with search across 399 azkar and duas, audio, fasting reminders, and a full admin panel inside WhatsApp.

    HMAC-SHA256 signed webhooks, opt-in only, rate-capped sending, and phone numbers masked in logs.

    • Python
    • PostgreSQL
    • Docker
    • GitHub Actions
    • Coolify

  3. Career Automation

    Job search automation platform, 2026

    Collects jobs from LinkedIn, Saudi and international boards and Telegram job groups, then uses Claude to match roles, tailor resumes, draft cover letters and prepare for interviews. Runs as a web dashboard and a desktop app.

    Nothing is sent without approval: every action passes a human approval gate in a Telegram bot.

    • Python
    • Playwright
    • Claude API
    • Telegram
    • FastAPI
    • Electron
Report

Incident closed.Let's talk.

Security is a process, not a product.

Bruce Schneier

© 2026 Muhannad Mohammed Alzughaibi

Secured · Hardened · Monitored