Case file / UA-CYBR-2027 / status: open

Soliman Alktaifan

Cybersecurity student at the University of Akron. I triage alerts, read packets, and build the automation that makes the next investigation faster than the last one.

Analyst ID Verified
Portrait of Soliman Alktaifan
Cybersecurity B.S. University of Akron / 4.0 GPA / Class of 2027
5th Midwest Regional CCDC

Blue team defense against live red team attacks across a full enterprise stack.

7 / 68 OCRI Capture Ohio CTF

Team Lazy Bugs, forensics and reverse engineering under a live scoreboard.

01 HTCIA chapter

Founding president of the university's HTCIA student chapter.

RA Resident Assistant

Runs incident reporting and community programming alongside coursework.

Capabilities

The toolkit is built for evidence, not decoration.

SPL

Security operations

Alert triage, log review, phishing analysis, vulnerability scanning, and concise escalation notes.

PCAP

Network forensics

Packet inspection, timeline building, indicators of compromise, and evidence summaries with Wireshark.

SIEM

Detection engineering

Wazuh and auditd rules mapped to MITRE ATT&CK, tuned against real attack simulations.

PY

Automation

Python and TypeScript workflows that cut repetitive analysis and make findings reusable.

Selected work

Projects presented as case evidence.

$ ollama run zippy-kiosk

context=college_of_business

status=deployed on university GPU server

ZAI-01

Zippy AI

An AI-powered information kiosk for the College of Business, built with Python, QML, and a locally hosted Ollama model so student queries never leave university infrastructure.

View GitHub

$ generate soc challenge

alert_type=phishing

report_status=ready

HLC-02

HackLab Coach

AI-guided cybersecurity training platform with adaptive challenge generation, a coaching API, Socratic hints, and a rubric-graded incident report generator.

Open repository

DMA-03

Daily Mood App

A full-stack tracking app focused on fast entry and readable history, built end to end to practice shipping software beyond schoolwork and labs.

Open repository

SOC-04

SOC and forensics labs

Wazuh SIEM deployment, auditd detection rules mapped to MITRE ATT&CK, TryHackMe SOC simulator work, and packet-level incident writeups.

View GitHub

Working method

AI is a tool in the workflow, not the workflow.

$ draft report --source pcap_export.json

$ verify against packet capture

$ rewrite in plain language for the ticket

$ submit

Where AI actually helps

I use AI to accelerate first drafts, compare detection strategies, and pressure-test wording on incident writeups. Every output still gets checked against the raw evidence, the packet capture, the log, the rule, before it goes anywhere.

MITRE ATT&CK Wazuh Splunk Incident writing

Handoff

Looking for cybersecurity, IT, or AI internship work.