Ammar Abu Khamis

Cybersecurity Specialization · Cohort 2025

AI-Driven SIEM and SOAR Integration for Enhanced Cyber Defense and Automation

This project focuses on enhancing cybersecurity operations by implementing and integrating Security Information and Event Management (SIEM) systems with Security Orchestration, Automation, and Response (SOAR) platforms, leveraging Artificial Intelligence (AI) for improved threat detection and response. The project aims to explore how AI-driven analytics can help automate incident detection, investigation, and response processes, reducing manual intervention and speeding up response times. Key components of the project include: 1. SIEM Integration: Streamlining real-time monitoring and analysis of security events from various data sources (Applications logs, Firewall logs, WAF, system logs, etc.) to identify potential threats. 2. SOAR Implementation: Automating incident response workflows, including alert triage, investigation, and mitigation, through predefined playbooks and AI assistance. 3. AI/ML Integration: Applying machine learning techniques to analyze large datasets for anomalous patterns, identify emerging threats, and suggest corrective actions. 4. Automation: Developing automated workflows to reduce response time and enhance operational efficiency in handling cybersecurity incidents. This project will allow you to gain hands-on experience with advanced cybersecurity tools and

Mentor: Ali Hassan & Mahmoud Ellouh

See it in the program report (PDF)