Hi, my name is
Raihan Ahmed
Security Enthusiast | Blue Team Specialist | Cyber Researcher
About Me
Hey there! I'm Raihan, a Management Information Systems student at San Jose State University specializing in Cybersecurity and Security Operations. I have a deep passion for understanding modern attack vectors, analyzing endpoint and network telemetry, and building proactive threat detection workflows.
My journey in cybersecurity is driven by hands-on execution and real-world defense. From working and interning with the security and application performance team at Cloudflare triaging WAF, DDoS, and application security threats, to automating AI-driven phishing detection workflows at ServiceNow, I focus on converting complex security data into swift, effective threat mitigation.
Whether I'm investigating security incidents, writing automation scripts in Python and PowerShell, or competing in threat hunting CTFs, I am committed to continuous learning and protecting critical digital infrastructure.
Skills
Security Operations
Cloud & Virtualization
Networking
Languages & Scripting
Certifications
AWS Certified Cloud Practitioner
Amazon Web Services
Status: In Progress
PursuingFeatured Projects
Zero Trust & Layer 7 DDoS Mitigation
Decoupled origin infrastructure using Cloudflare Tunnels, WAF rate-limiting policies, and Zero Trust OTP challenges. Validated 100% edge absorption of L7 DDoS bursts with 0 impact or attack noise on a self-hosted Ubuntu Splunk SIEM.
SSH Log Parser & Security Event Normalizer
A lightweight Python automation script designed to parse raw, unstructured Linux SSH authentication logs and normalize them into clean, structured JSON data for SIEM ingestion.
AI-Powered SOC Phishing Triage Agent
An AI-powered SOC workflow that analyzes suspicious URLs using VirusTotal and URLScan.io threat intelligence, normalizes security telemetry, and generates structured phishing triage reports with Google Gemini.
GRC AI Telemetry Pipeline
Engineered an agentic GRC workflow using FastMCP, n8n, and Google Gemini to ingest mock cloud security telemetry and generate automated, NIST-aligned risk assessments.