Ibrahim Y. Alzahrani
Cyber Threat Intelligence specialist with broad computer experience since 2000 and 7+ years across IT engineering and security-focused roles. Currently leading CTI initiatives at Naif Arab University for Security Sciences (NAUSS). Focused on ransomware and cybercrime intelligence, advanced OSINT/dark web investigations, malware behavior analysis, and vulnerability-informed threat profiling. Leverages AI (ML/DL) to automate evidence collection, indicator enrichment, and analyst-assist workflows that strengthen threat hunting and operational reporting for security agencies.
hub Core Competencies
Tip: use Search aboveCTI lifecycle
PIRs/IRs, collection planning, structured analytic reporting
Ransomware & cybercrime intelligence
Actor profiling, ecosystem monitoring
OSINT / SOCMINT / Dark web intelligence
Collection, verification, source mapping
TTP & campaign analysis
MITRE ATT&CK mapping, intrusion narratives, linkage
IOC engineering
Extraction, enrichment, scoring, quality control, sharing
Vulnerability-informed CTI
CVE context, exploitation signals, prioritization support
AI for CTI
Automation, pattern detection, entity extraction, investigation tooling
terminal Tools & Methods
Platforms / Workflows
- • MISP / IoC workflows (curation, enrichment, governance)
- • OSINT & investigative workflows (verification and reporting)
Analysis
- • Behavioral malware triage and indicator extraction
- • Threat briefing & stakeholder enablement
work_history Professional Experience
Cyber Threat Specialist (Full-time)
Naif Arab University for Security Sciences (NAUSS) • Saudi Arabia
Aug 2023 — Present
expand_more
- • Lead CTI project activities and intelligence products supporting cybercrime and security investigations.
- • Conduct OSINT/SOCMINT/dark web investigations to identify actors, infrastructure, and emerging tactics.
- • Analyze ransomware ecosystems (leak sites, extortion patterns, crypto-enabled behavior) to produce actionable intelligence.
- • Perform malware behavior and TTP analysis; extract high-confidence IOCs and map techniques to MITRE ATT&CK.
- • Prototype AI-enabled analyst workflows for evidence collection automation and indicator enrichment.
- • Deliver specialized training for security agencies: OSINT, SOCMINT, Dark Web, Cryptocurrency Investigations.
Computer Engineer (Full-time)
Saudi Intelligent Solutions • Riyadh, Saudi Arabia
Aug 2021 — Aug 2023
expand_more
- • Supported enterprise engineering operations across infrastructure and services; contributed to integration and reliability.
IT Specialist
Ashcroft Inc. • Saudi Arabia
Nov 2014 — Dec 2017
expand_more
- • Provided IT operations support, troubleshooting, and service continuity in an enterprise environment.
rocket_launch Projects
CTI Project Team Lead (NAUSS)
Led CTI workflows, reporting, and stakeholder enablement for security-focused initiatives.
AI-Enabled Drone Security Project (NAUSS)
Infrastructure lead (servers + edge computing) supporting AI-based threat detection.
CTI POC Platform
map.ii.sa — proof-of-concept platform supporting CTI analysis and reporting workflows.