Bahaa Yehia — Founder of CyberForged Academy

Beirut, Lebanon — Open to Remote Globally

The Founder

Bahaa Yehia

GRC Analyst · SOC Analyst · CCNA Instructor · CCEP · CySA+ · Security+ · Founder, CyberForged Academy

I am an active GRC Analyst and former SOC Analyst working in the public sector in Beirut, a Cisco CCNA Instructor at Advanced Tech Academy, and a Certified Cybersecurity Educator Professional (CCEP). I founded CyberForged Academy because I saw the same problem every time I looked at the Lebanese cybersecurity market: companies cannot find trained candidates, and trained candidates cannot find a structured path into employment.

CyberForged Academy exists to close that gap — with practical hands-on training that builds real skills, a portfolio that proves those skills to employers, and a direct placement connection that removes the guesswork from job searching.

I teach from active practice, not from memory. Every course I deliver is informed by what I do daily as a GRC Analyst and what I see clients and employers actually need — not what a textbook written five years ago says they need.

View Training Tracks WhatsApp Me

Years active cybersecurity experience

Certifications held

Training tracks designed and delivered

Certifications

Credentials Behind the Curriculum

Every certification I hold directly informs the track I teach. You learn from someone who has passed the exams and applies the knowledge daily.

CompTIA CySA+May 2026

CompTIA Security+Jan 2026

Cisco CCNASep 2025

CCEP — Red Team LeadersJan 2026

Google CybersecurityApr 2026

Cisco Network DefenseDec 2025

CC — ISC2Dec 2022

EHE — EC-CouncilDec 2022

ISO/IEC 27001:2022 Lead ImplementerJul 2026

Network Security — CodeRedDec 2025

CISA — ISACANext

Professional Experience

Jan 2026 — Present

GRC Analyst

Public Sector Organisation — Beirut, Lebanon. ISO 27001 control assessments, risk register maintenance, vulnerability management, compliance monitoring, incident management, and audit readiness.

Jan 2026 — Present

Cisco CCNA Instructor

Advanced Tech Academy — Beirut, Lebanon. Delivering structured CCNA curriculum to students pursuing Cisco certification in networking and network security.

Apr 2025 — Dec 2025

SOC Analyst

Public Sector Organisation — Beirut, Lebanon. SIEM monitoring, EDR and IDS/IPS management, threat hunting, IOC analysis, incident response, and MITRE ATT&CK-aligned detection.

Apr 2024 — Jul 2024

SOC Analyst Intern

PoTech Company — Beirut, Lebanon. Log analysis, alert triage, threat intelligence, and Active Directory security monitoring.

Jan 2023 — Mar 2023

Cybersecurity Project Intern

BrainNest — Germany (Remote). Penetration testing fundamentals, vulnerability analysis, and Python security automation.

Education

MSc

In Progress

MSc Computer Science — Cybersecurity Track

Lebanon. Research focus: AI-driven GRC and automated cybersecurity compliance assessment.

BSc

Completed

BSc Computer Science

Lebanon. Includes an academic exchange scholarship year at Universidad de Lleida, Barcelona, Spain.

Projects and Tools

What I Have Built

These are not theoretical exercises. Every project is a working product built from real GRC and security knowledge.

CyberGRC Assess

An AI-powered GRC assessment platform replicating KPMG's Cyber Maturity Assessment methodology. Evaluates organisations across 9 security domains mapped to ISO 27001:2022 Annex A and NIST CSF 2.0 — with AI-generated executive summaries and remediation roadmaps via the Claude API. Used in the GRC Analyst training track as a practical assessment tool.

github.com/Bah358/cybergrc-assess

SecureBank GRC Portfolio

A complete ISMS implementation for a fictional financial services organisation — demonstrating end-to-end GRC Analyst competency. Includes: Information Security Policy, 15-risk Risk Register (ISO 27005 methodology), Annex A Control Mapping (35 controls), NIST CSF 2.0 Gap Assessment (2.3/5.0 maturity score), and Vendor Risk Assessment. Used as the template for GRC track student portfolios.

github.com/Bah358

Early Warning SIEM

A Python SIEM prototype with real-time log ingestion, MITRE ATT&CK-aligned detection rules, and risk scoring. Includes a Streamlit SOC dashboard for alert visualisation. Used in the SOC Analyst track to demonstrate how detection rules are built and how alerts are generated from raw log data.

github.com/Bah358/SIEM-Prototype

USB Sentinel

A Python endpoint security tool that detects BadUSB and HID injection attacks using Windows Management Instrumentation (WMI) with automated PowerShell blocking of unauthorised USB devices. Demonstrates practical endpoint protection concepts used in the SOC and IR tracks.

github.com/Bah358/usb-sentinel

Why CyberForged Exists

Practical Skills. The Right Roles. A Clear Path to Employment.

CyberForged Academy was built around three things that no other training in Lebanon delivers together: practical training through real labs and real projects, a deliberate focus on the four cybersecurity roles with the highest demand and best salaries, and a direct connection to the companies hiring for those roles.

Most training stops at the certificate. We do not. We build you the skills, publish your work publicly so employers can see it, connect you directly to our partner companies, and give you a structured progression path from Level 1 through to senior — in the roles that actually hire at entry level and pay well from day one.

For companies, we do the same thing in reverse — we train your employees in exactly the areas your organisation needs, tailored to your industry and compliance requirements, delivered by a practitioner who is doing this work right now.

Four tracks chosen for highest hiring demand, easiest entry points, and strongest salary growth — not chosen randomly

Every session built around doing — solving real labs, building real projects, published publicly on our website

Graduates leave with a professional certificate, a public portfolio, and a direct introduction to partner companies

Employee training tailored to each organisation — not a generic course but a programme built around your team, your industry, and your compliance needs

What People Say

Feedback from Students and Partners

★★★★★

"Bahaa teaches from real experience — not from slides. Every example in the GRC track came from something he had actually done at work. That made it immediately applicable to our jobs."

Karim HaddadGRC Analyst Graduate

★★★★★

"The CCNA instruction was exceptional. He has a way of making complex networking concepts feel simple without dumbing them down. The SIEM prototype he built was impressive — shows he genuinely understands the technical side."

Rami MoussaNetwork Engineering Student, Beirut

★★★★★

"The CyberGRC Assess platform is the most impressive thing I have seen from an independent consultant in Lebanon. The fact that he built this himself — combining AI with ISO 27001 — tells you everything about his technical and GRC depth."

Nada BitarIT Manager, Lebanese Company

Get in Touch

Talk to Bahaa Directly

Whether you are a student, a company looking to hire, or an organisation wanting to train your employees — reach out directly. I respond within 2 hours on WhatsApp.

+961 70 788 995

yehyabahaa358@gmail.com

Beirut, Lebanon — available for remote and in-person

github.com/Bah358

Bahaa Yehia

Credentials Behind the Curriculum

GRC Analyst

Cisco CCNA Instructor

SOC Analyst

SOC Analyst Intern

Cybersecurity Project Intern

MSc Computer Science — Cybersecurity Track

BSc Computer Science

What I Have Built

CyberGRC Assess

SecureBank GRC Portfolio

Early Warning SIEM

USB Sentinel

Practical Skills. The Right Roles. A Clear Path to Employment.

Feedback from Students and Partners

Ready to Forge Your Cybersecurity Career?

Talk to Bahaa Directly