Jawad Charafeddine

About Jawad Charafeddine

Blue-team cybersecurity analyst building AI-powered SOC workflows to accelerate triage…

Experience

1. Cybersecurity Trainee

   Log N Pacific

   Mar 2025 — Present

   Built a reproducible lab (Kali Linux + Windows targets via VirtualBox) for ethical testing and packet analysis; managed snapshots, networking, and VPN (OpenVPN) connectivity for TryHackMe rooms.• Performed targeted Nmap scans (host discovery, service/version scripts) to inform attack paths; documented scan profiles and false-positive handling.• Executed safe exploitation/post-exploitation in isolated labs using Metasploit (incl. EternalBlue scenario), established Meterpreter sessions, backgrounded sessions, ran post modules, and practiced process migration- all with step-by-step notes.• Investigated DNS: captured/decoded queries in Wireshark, compared UDP vs TCP behaviors, explored cache behavior/TTL, and studied DoH concepts & detection trade-offs for later blue-team work.• Hardened demo sites using securityheaders.com guidance (HSTS, CSP, X-Content-Type-Options, Referrer-Policy, etc.); tracked before/after results and mitigation notes.• Practiced password-hash handling in labs with John the Ripper and Hashcat; recognized formats like sha512crypt ($6$) and documented safe, legal workflows.• Wrote small bash utilities for enumeration/log parsing; tracked learned topics (stateful vs stateless firewalls, XOR, ARP, tokenization in mobile payments) in concise runbooks and Anki cards.• Troubleshot Linux tooling (nano/top, services, display drivers, build-from-source steps) and VirtualBox guest integrations; kept a rolling “break/fix” doc.

Education

• University of Houston

  Bachelor of Science - BS