MohammedAlrashid
Security Engineer in Salt Lake City. I secure a cloud-native building automation platform.
Vulnerability management
I own it end to end: authenticated scanning across cloud, server, and endpoint environments, severity-based SLA tracking, and patch campaigns.
- Rapid7 InsightVM
- Jamf
- Intune
Identity and access
I lead identity on Entra ID and GCP: SAML and OIDC federation, SCIM provisioning, workforce identity federation, and Conditional Access with MFA.
- Entra ID
- Conditional Access
- SCIM
Incident response
I run email security and lead incident response from detection through postmortem.
- Defender for Office 365
- Postmortems
Platform risk reviews
I review internal platforms for risk before they release, and I own the SOC 2 and GDPR control evidence.
- Pre-release review
- SOC 2
- GDPR
At PassiveLogic since 2023
Security Engineer
Own vulnerability management end to end: authenticated Rapid7 InsightVM scanning across cloud, server, and endpoint environments, severity-based SLA tracking, and patch campaigns through Jamf and Intune.
Security Intern
Established the company's first documented cloud security controls across GCP, Azure, and Microsoft Exchange.
Lab, tools, and notes
Home lab
Proxmox, segmented networks, backups I can restore, and local AI. I use it to learn by doing.
Security tools
A secret generator, a subnet calculator, and a self-hosted copy of CyberChef. They all run in your browser.
Notebook
Notes on zero trust, cloud security, AI agents, and the parts of security I want to understand better.
Let's talk
If you have a security role, a project, or just a question, I'd like to hear from you.