Portrait of Ghareeb Thiab, cybersecurity instructor and co-founder of NetworX

Ghareeb Thiab

Cybersecurity Instructor at CODED · Co-Founder & CTO of NetworX

I teach hands-on cybersecurity and run NetworX, a cybersecurity and IT consulting company for businesses. My background is in IT audit, governance and risk, and Blue Team (defensive) security.

At CODED, I have trained 150+ professionals in practical security, from Security Information and Event Management (SIEM) and incident response to threat hunting, digital forensics, and Active Directory attack paths. I also co-founded NetworX, where I am the Chief Technology Officer (CTO). NetworX gives small and medium-sized businesses managed security, SOC monitoring, cybersecurity consulting, and incident response. I am also the IT and cybersecurity consultant to the President of the American University of Kuwait (AUK). Before this, I completed 35+ IT and cybersecurity audits at Gulf Bank of Kuwait.

  • 6+ years in cybersecurity & IT audit
  • 150+ professionals trained
  • CISSP · CISA · 3× GIAC
  • CISSP
  • CISA
  • GIAC GSEC
  • GIAC GCIH
  • GIAC GFACT
  • CompTIA CASP+
  • Cisco CCNA
  • 6+ Years in cybersecurity & IT audit
  • 35+ IT & cybersecurity audits completed
  • 150+ Professionals trained at CODED
  • 20+ Certifications & credentials

About

Professional summary

Ghareeb Thiab is a Cybersecurity Instructor at CODED and the Co-Founder and CTO of NetworX, based in Kuwait. He has over six years of experience in Kuwait's banking and government sectors. His core areas are IT internal audit; governance, risk and compliance (GRC); Security Operations Center (SOC) work; and Digital Forensics and Incident Response (DFIR). At CODED, he has trained 150+ professionals in SOC, DFIR, and Red Team skills.

Since January 2022, he has led technology at NetworX, a cybersecurity and IT consulting company that he co-founded. NetworX focuses on business clients (B2B) and serves multiple clients, including the education sector and medium-sized businesses. It gives small and medium-sized businesses managed security, SOC monitoring, cybersecurity consulting, and DFIR support, and advises them on IT strategy, network security, and firewall design. Since May 2026, he has also been the official IT and cybersecurity consultant to the President of the American University of Kuwait (AUK).

At Gulf Bank of Kuwait, he completed 35+ IT and cybersecurity audits against Central Bank of Kuwait (CBK) rules and was promoted from Senior Auditor to Supervisor Auditor. At the Public Institution for Social Security (PIFSS), he led the ISO 27001 certification and set up a new threat detection platform. He is a graduate of the CBK Cyber Security Leaders Program and holds the CISSP, CISA, and three GIAC certifications (GCIH, GSEC, GFACT).

Experience

Work experience

Advisory, technology leadership, IT audit, and information security roles across the education, technology services, banking, and government sectors in Kuwait.

IT & Cybersecurity Consultant to the President · American University of Kuwait Current

– Present

Salmiya, Kuwait

  • Serve as the official IT and cybersecurity consultant to the President of the American University of Kuwait (AUK).
  • Completed a full audit of the university's IT and cybersecurity.
  • Advise the President on the use of AI across the university, for faculty and students, and on the impact AI brings to courses and students.

Co-Founder & CTO · NetworX Current

– Present

Kuwait · networx.com.kw

  • Co-founded NetworX, a Kuwaiti cybersecurity and IT consulting company focused on business clients (B2B), serving multiple clients, including the education sector and medium-sized businesses. As CTO, set the technical direction for its services.
  • Provide managed security, Security Operations Center (SOC) monitoring, and cybersecurity consulting to small and medium-sized businesses.
  • Lead digital forensics and incident response (DFIR) cases, from the first response to the final root-cause report.
  • Advise clients on IT strategy, network security, and firewall design.

Supervisor Auditor, IT Internal Audit · Gulf Bank of Kuwait

–

Sharq, Kuwait

Supervisor Auditor, IT Internal Audit Promotion Dec 2024 – Apr 2026
Senior Auditor, IT Internal Audit Dec 2022 – Dec 2024
  • Completed 35+ IT and cybersecurity audits in 3+ years (about three each quarter) on core banking systems and infrastructure.
  • Led the bank's yearly Information and Cyber Security audit. Set the scope and made sure that the work met Central Bank of Kuwait (CBK) and internal rules.
  • Audited firewalls, IDS/IPS, endpoint protection, user access, and change management against CBK rules, ISO 27001, and PCI DSS.
  • Wrote Python scripts and regular expression (regex) searches that cut the time needed to review logs and collect evidence.
  • Reported findings and remediation plans to senior management, and tracked each finding until the owner closed it.

Information Security Analyst · Public Institution for Social Security

–

Mirqab, Kuwait

  • Monitored and sorted security alerts as a SOC analyst, and used log analysis to find threats.
  • Led the design, setup, and tuning of a Network Detection and Response (NDR) platform. Added custom detection rules that cut false alarms.
  • Led the ISO 27001 project and managed the external audit. PIFSS passed certification and renewal.
  • Wrote the information security policies and procedures, and ran the PIFSS Security Awareness Week.

Student Lab Assistant · American University of Kuwait

–

Salmiya, Kuwait

  • Taught VHDL (a hardware description language) to lab students.
  • Supervised exam sessions and student projects.
  • Organized laboratory equipment.

Teaching & Training

Cybersecurity instruction

Cybersecurity and AI teaching, lab development, workshops, and talks at CODED and across Kuwait.

Cybersecurity Instructor · CODED Current

– Present

Free Trade Zone, Kuwait

Full-time May 2026 – Present
Part-time Jul 2025 – Apr 2026
  • Trained 150+ professionals and graduates in 6 cohorts (groups) of about 25 trainees each.
  • Teach Blue Team skills: SIEM (Splunk, ELK), digital forensics and incident response (DFIR), threat intelligence, threat hunting, and malware analysis, based on MITRE ATT&CK.
  • Teach Red Team, OSINT, and social engineering courses, plus Linux, Windows, and network basics for new SOC analysts.
  • Build hands-on labs, Capture-the-Flag (CTF) challenges, and cyber ranges (practice networks), including an Active Directory attack range (GOAD).
  • Teach AI courses to Khafji Joint Operations (KJO): AI for Data Analysis, and AI for Executives & Managers.
  • Designed and taught AI security labs on attacking and defending AI systems.

Courses & workshops delivered

Blue Team Fundamentals

Instructor · 5 weeks

  • Covers SIEM, DFIR, threat intelligence, threat hunting, and malware analysis.
  • Focuses on defensive security operations and the incident response process.
  • Includes hands-on labs with industry-standard tools and real-world scenarios.

Red Team Fundamentals

Instructor · 5 weeks

  • Introduces offensive security and Red Team (attack simulation) techniques.
  • Covers Linux and Windows Active Directory (AD) attack paths.
  • Includes hands-on practice with exploits in a controlled lab.

Cybersecurity Bootcamp

Instructor · 2 weeks

  • Gives an intensive introduction to Linux, Windows, and networking basics.
  • Includes practical exercises in system hardening, log analysis, and threat detection.
  • Designed to help beginners build a cybersecurity foundation quickly.

Information Security Awareness

Instructor

  • Covers key security concepts: the CIA triad (confidentiality, integrity, and availability), risk management, and incident response.
  • Explains current security threats and vulnerabilities.

OSINT & Social Engineering

Instructor

  • Covers open-source intelligence (OSINT) tools and techniques.
  • Explains social engineering tactics and how they work.
  • Teaches how to prevent and protect against social engineering.

AI for Data Analysis

Instructor · Khafji Joint Operations (KJO)

  • Taught KJO staff how to use AI tools, including Microsoft Excel and Microsoft Copilot, to analyze data faster and more accurately.
  • Covers how to clean and prepare data before analysis.
  • Includes hands-on practice with charts and visual reports.

AI for Executives & Managers

Instructor · Khafji Joint Operations (KJO)

  • Helped KJO executives and managers make structured decisions about how to adopt AI in their operations.
  • Covers AI governance, risk, and compliance (GRC), including policies, data privacy, and accountability.
  • Explains how to assess AI risks and set controls before a new AI tool goes live.

Al-Soor Initiative: Cybersecurity Awareness for High Schools

Speaker · National Cyber Security Center (NCSC), Kuwait · 2026

  • Gave six 2-hour cybersecurity awareness seminars to grade 10–12 students, at one high school in each of Kuwait's six governorates.
  • Covered phishing, social engineering, and password cracking.
  • Showed students how to check for leaked accounts with Have I Been Pwned and DeHashed, and how to scan suspicious links with urlscan.io.
  • Taught students to check photo metadata and remove GPS location data before they share photos.

Training & speaking

  • Instructor · Government awareness workshops

    Cybersecurity awareness workshops for government personnel · Ministry of Interior & Ministry of Defence

    May–Jun 2026
  • Guest Instructor · Memory Analysis in DFIR

    Workshop using Volatility 3 and MemLabs · Kuwait University

    Dec 2025
  • Instructor · PIFSS Security Awareness Week

    Public Institution for Social Security

    2021
  • Lecturer · IEEE 2nd GCC Students & Young Professionals Congress

    Kuwait

    2019

AI Security

AI security & AI for Blue Team

Using AI to make defensive security work faster, and helping organizations adopt AI safely.

AI Security Research & Development · Personal & entrepreneurial projects Current

– Present

Kuwait

  • Build AI workflows that support Blue Team work: alert triage, log analysis, threat hunting, and detection writing.
  • Write Python tools that use Large Language Model (LLM) APIs, AI agents, and Model Context Protocol (MCP) integrations.
  • Test new AI tools and agents to find safe and practical uses in defensive security.
  • Model threats to AI systems with MITRE ATLAS.

Where this work shows up

AI security labs

CODED

  • Designed and taught AI security labs on attacking and defending AI systems.

AI programs for KJO

Khafji Joint Operations (KJO)

  • Designed and delivered AI for Data Analysis, and AI for Executives & Managers, including AI governance, risk, and controls before a new AI tool goes live.

AI advice at university level

American University of Kuwait (AUK)

  • Advise the President on the use of AI across the university, for faculty and students.

AI risk & governance

Frameworks

  • Assess AI risk with the NIST AI Risk Management Framework (AI RMF) and ISO/IEC 42001.

Certifications

Certifications & professional programs

Each date shows when the certification or program was completed.

ISC2 & ISACA

  • CISSP

    Certified Information Systems Security Professional · ISC2

    Earned Dec 2024
  • CISA

    Certified Information Systems Auditor · ISACA

    Earned Jan 2023
  • Associate of ISC2

    ISC2

    Earned 2021

Central Bank of Kuwait

  • CBK Cyber Security Leaders Program

    Central Bank of Kuwait · 4-month program (three SANS courses and one Bank for International Settlements (BIS) course)

    2023
  • BIS Cyber Range Exercise

    Cyber resilience exercise for the financial sector

    2023

GIAC / SANS

  • GCIH: GIAC Certified Incident Handler

    GIAC · SANS SEC504

    Earned Sep 2023
  • GSEC: GIAC Security Essentials

    GIAC · SANS SEC401

    Earned Aug 2023
  • GFACT: GIAC Foundational Cybersecurity Technologies

    GIAC · SANS SEC275

    Earned Jul 2023
  • GIAC Advisory Board

    Invited based on GIAC exam results

    2023

CompTIA

  • CompTIA CASP+

    CompTIA Advanced Security Practitioner

    Earned Mar 2021
  • CompTIA PenTest+

    CompTIA

    Earned Mar 2021
  • CompTIA CySA+

    CompTIA Cybersecurity Analyst

    Earned Feb 2021
  • CompTIA Security+

    CompTIA

    Earned Dec 2020
  • CompTIA Network+

    CompTIA

    Earned Dec 2020
  • CompTIA A+

    CompTIA

    Earned Nov 2020

CompTIA stackable certifications

  • CSIE: Secure Infrastructure Expert
  • CSAE: Security Analytics Expert
  • CNVP: Network Vulnerability Assessment Professional
  • CNSP: Network Security Professional
  • CSAP: Security Analytics Professional
  • CSIS: Secure Infrastructure Specialist
  • CIOS: IT Operations Specialist

Cisco & other

  • Cisco CCNA

    Cisco Certified Network Associate

    Earned Apr 2021
  • Splunk Fundamentals 1

    Splunk

    2020
  • Introduction to Cybersecurity

    Cisco Networking Academy

    2020

Education

Education

B.E. in Computer Engineering

American University of Kuwait (AUK) · Salmiya, Kuwait

Dean's Honor List (Fall 2015, Spring 2019)

–

Skills

Skills & expertise

GRC & audit

  • IT internal audit
  • IT general controls (ITGC)
  • Risk assessment
  • CBK regulations
  • ISO 27001
  • PCI DSS
  • NIST CSF

SOC & SIEM

  • Splunk
  • Elastic (ELK)
  • Microsoft Defender
  • Corelight
  • Security Onion
  • MITRE ATT&CK

DFIR

  • Incident response
  • Volatility 3
  • Memory forensics
  • Wireshark
  • EVTX & log analysis

Offensive

  • Kali Linux
  • Burp Suite
  • Nmap
  • Metasploit
  • BloodHound
  • Active Directory attacks

Infrastructure

  • Fortinet FortiGate
  • Palo Alto (PAN-OS)
  • Cisco IOS
  • Rapid7 InsightVM
  • Microsoft Azure

AI security & governance

  • AI threat modeling
  • MITRE ATLAS
  • AI risk assessment
  • NIST AI RMF
  • ISO/IEC 42001
  • EU AI Act
  • AI usage policies

AI engineering

  • LLM APIs (Claude)
  • AI agents
  • Model Context Protocol (MCP)
  • Python (pandas, scikit-learn)
  • Microsoft Copilot

Scripting

  • Python
  • Bash
  • Regex

Languages

  • Arabic (native)
  • English (fluent)

Highlights

Selected professional highlights

Advisor to the AUK President

Official IT and cybersecurity consultant to the President of the American University of Kuwait, including a full IT and cybersecurity audit and advice on AI use.

35+ audits and a promotion

Completed 35+ IT and cybersecurity audits at Gulf Bank of Kuwait and was promoted to Supervisor Auditor.

150+ professionals trained

Trained 150+ professionals at CODED, plus government staff, KJO executives and managers, and high-school students.

Recognized expertise

Holds the CISSP, CISA, and three GIAC certifications. Serves on the GIAC Advisory Board and graduated from the CBK Cyber Security Leaders Program.

FAQ

Frequently asked questions

Who is Ghareeb Thiab?

Ghareeb Thiab is a Cybersecurity Instructor at CODED and the Co-Founder and CTO of NetworX. He is based in Kuwait City, Kuwait. He has over six years of experience in cybersecurity, IT audit, governance, risk and compliance (GRC), and Blue Team security operations.

What certifications does Ghareeb Thiab hold?

He holds the CISSP and CISA, three GIAC certifications (GCIH, GSEC, GFACT), the Cisco CCNA, six CompTIA certifications (CASP+, PenTest+, CySA+, Security+, Network+, A+), and seven CompTIA stackable certifications. He is a graduate of the Central Bank of Kuwait Cyber Security Leaders Program and serves on the GIAC Advisory Board.

What does Ghareeb Thiab do?

He is a Cybersecurity Instructor at CODED, where he has trained 150+ professionals in hands-on Blue Team and Red Team skills. He is also the IT and cybersecurity consultant to the President of the American University of Kuwait (AUK). He co-founded NetworX and is its CTO. NetworX gives small and medium-sized businesses managed security, SOC monitoring, cybersecurity consulting, and incident response. Before this, he completed 35+ IT and cybersecurity audits at Gulf Bank of Kuwait.

Where is Ghareeb Thiab based?

Ghareeb Thiab is based in Kuwait City, Kuwait.

What does Ghareeb Thiab teach?

At CODED, he teaches Blue Team and Red Team fundamentals. Topics include SIEM, digital forensics and incident response (DFIR), threat hunting, malware analysis, and Active Directory attack paths. He also teaches the basics of Linux, Windows, and networking, and has taught AI courses for Khafji Joint Operations (KJO). He has given a memory forensics workshop at Kuwait University and cybersecurity awareness workshops for government staff. Through the National Cyber Security Center (NCSC) Al-Soor initiative, he gave cybersecurity awareness seminars to high-school students in all six governorates of Kuwait.

What is NetworX?

NetworX is a cybersecurity and IT consulting company focused on business clients (B2B) that Ghareeb Thiab co-founded in January 2022. It serves multiple clients, including the education sector and medium-sized businesses. It provides managed security, Security Operations Center (SOC) monitoring, cybersecurity consulting, and digital forensics and incident response (DFIR) to small and medium-sized businesses, and advises clients on IT strategy, network security, and firewall design. He is its Co-Founder and CTO.

How many years of experience does Ghareeb Thiab have?

Ghareeb Thiab has over six years of professional experience in cybersecurity and IT audit. Since 2020, he has worked at the Public Institution for Social Security, Gulf Bank of Kuwait, CODED, and NetworX, which he co-founded in 2022.

What industries has Ghareeb Thiab worked in?

He has worked in banking and finance at Gulf Bank of Kuwait, and in government at the Public Institution for Social Security. He has also worked in education at CODED and the American University of Kuwait, and in cybersecurity and IT consulting at NetworX, which he co-founded.

Does Ghareeb Thiab work on AI security?

Yes. He uses AI and LLM agents to support Blue Team work, such as alert triage, log analysis, threat hunting, and detection writing, and builds Python tools with LLM APIs, AI agents, and Model Context Protocol (MCP) integrations. He assesses AI risk with the NIST AI Risk Management Framework and ISO/IEC 42001, and models AI threats with MITRE ATLAS. He designed and taught AI security labs at CODED and advises the President of the American University of Kuwait on AI use.

Is Ghareeb Thiab available for new opportunities?

Yes. Ghareeb Thiab is open to opportunities and collaboration in information security, IT audit, and cybersecurity instruction. The best way to reach him is by email at ghareebthiab@gmail.com.

Contact

Get in touch

Open to opportunities and collaboration in information security, IT audit, and cybersecurity instruction. The best way to reach me is by email.