CV

Eng. Mashal Buhamad

Cybersecurity Consultant · Strategic Advisor · AI & Infrastructure Security Expert

Independent & vendor-agnostic · OT/ICS Resilience · AI Security

0
Years Experience
0
Major Engagements
0
National Contributions
0
Self-Hosted Platform

Professional Summary

Independent cybersecurity consultant with 25+ years across government, critical infrastructure, and private sector. Former Head of Cybersecurity Committee at Kuwait’s Ministry of Electricity, Water & Renewable Energy (MEWRE), contributing to Kuwait’s first national cybersecurity policy.

I specialize in critical infrastructure protection, AI-driven security, red teaming, and multi-layered defense—always with an independent, results-driven approach. I architected Threat Atlas, a self-hosted threat-intelligence and defense platform integrating firewall automation, geolocation-based attack mapping, and AI enrichment.

Selected Projects & Impact

Threat Atlas

Self-hosted, multi-layer cyber defense: automated firewall actions, ClickHouse telemetry, attack geo-mapping, AI enrichment.

  • Designed for air-gapped/sovereign deployments
  • Vendor-agnostic ingestion with automated TTP tagging
  • Operational SOC dashboards and containment playbooks

Kuwait Password Checker

Privacy-preserving leak check using SHA-1 prefix matching on ClickHouse for near-real-time lookups.

  • Sub-100 ms lookups across multi-billion hash dataset
  • No plaintext storage; minimal attack surface
  • Dark, accessible public UI; local hashing only

National OT/ICS Initiatives

Directed MEWRE’s cybersecurity transformation; established Kuwait’s first dedicated OT/ICS team.

  • ~15% incident reduction in year one via SIEM/EDR/NDR rollout
  • Red-team simulations and incident response frameworks
  • Contributed to Kuwait’s first national cybersecurity policy

Professional Experience

Independent Cybersecurity Consultant

2025 – Present

Founder/architect of Threat Atlas; advisor on AI risks; SOC design and OT/ICS defense; international moderator/speaker.

Head, Cybersecurity Committee — MEWRE

2014 – 2025

Led OT/ICS programs, incident response, and governance; mentored national team; defended against APTs.

Easa Hussain Al-Yousifi & Sons Co.

2007 – 2014

GM, Business Solutions & Services / SAP Project Manager — large-scale SAP, continuity, IT risk.

Qualitynet

2000 – 2007

Project Manager / Red Team Analyst — national networking projects; systemic vulnerability assessments.

Certifications

  • PMP — Project Management Professional
  • Certified Computer Engineer (California)
  • Alcatel ADSL Installation Engineer
  • SDH Installation & Commissioning
  • NATO Network Security Course
  • Advanced Malware Analysis
  • AI & LLM Infrastructure Experimentation (ongoing)

Education

  • B.S. Computer Engineering — Univ. of the Pacific (1999)
  • MBA — Maastricht Business School, Kuwait (2008)

Affiliations

  • Atlantic Council — Contributor (AI strategy & governance)
  • GCCIA — Former member, Cybersecurity Group
  • Frequent panelist/moderator
“Resilience isn’t built by tools — it’s built by understanding how systems fail.”

Not seeking employment; available for advisory, architecture, and high-impact engagements.