09/10/2025 updated
100 % available
Experienced Cyber Security Expert and Manager
Giza, Egypt
Worldwide
Bachelor of Electronics & Communications EngineeringPenetration TestingAuditingComplianceComputer SecurityEthical HackingIdentity ManagementIT Risk ManagementInternational StandardsISO/IEC 27001Network SecurityRisk AnalysisSecurity PoliciesSecurity StudiesVulnerabilityFirewalls (Computer Science)
Cybersecurity Expertise
Extensive experience in security auditing, vulnerability assessments, and penetration testing. Certified CISSP and ISO27001 Lead Implementer.
Network Security
Proficient in configuring and managing network security systems, including firewalls, IAM systems, and various security tools.
Security Compliance
Skilled in conducting compliance audits, implementing security policies, and ensuring adherence to international standards.
Vulnerability Assessment
Expertise in conducting regular vulnerability assessments and penetration testing for various applications and networks.
Security Risk Management
Proficiency in performing security risk assessments and recommending mitigation strategies for identified risks.
Ethical Hacking
Experience in bug hunting and using various hacking techniques to identify and address security vulnerabilities.
Security Training
Capability to provide information security training programs and awareness campaigns to users and employees.
Extensive experience in security auditing, vulnerability assessments, and penetration testing. Certified CISSP and ISO27001 Lead Implementer.
Network Security
Proficient in configuring and managing network security systems, including firewalls, IAM systems, and various security tools.
Security Compliance
Skilled in conducting compliance audits, implementing security policies, and ensuring adherence to international standards.
Vulnerability Assessment
Expertise in conducting regular vulnerability assessments and penetration testing for various applications and networks.
Security Risk Management
Proficiency in performing security risk assessments and recommending mitigation strategies for identified risks.
Ethical Hacking
Experience in bug hunting and using various hacking techniques to identify and address security vulnerabilities.
Security Training
Capability to provide information security training programs and awareness campaigns to users and employees.
Experience
Professional experience10+ years
Freelancer since2020
Languages
ArabicNative speakerEnglishFluent
Project history
- Conducting Internal Security Audits for different organization systems, participating in external security audits, and following up mitigation and fixing processes for security gaps and discovered vulnerabilities.
- Conducting regular in-depth vulnerability assessments and penetration tests on critical infrastructure, and develop clear and detailed security assessment reports to application owners and stakeholders, explain threats presented, and consulting on remediation for discovered weaknesses using required patches and updates.
- Defining information security requirements of different security domains for new projects, to mitigate identified security weaknesses and protect systems against potential attacks.
- Participating in security risk assessments processes for different projects and systems, recommending remediation strategies and implementing security controls to address identified risks.
- Ensuring compliance of users and systems to the security policy and regulations, directing training sessions for employees on compliance and security best practices, and coordinate with different teams to maintain security and hardening their systems, to align with the organization’s security objectives and policy.
- Performing advanced penetration testing for high-profile clients, such as eBay, KFC, and McKinsey, targeting web applications, networks, and mobile platforms.
- Discovered critical vulnerabilities such as SQL Injection, CSRF, XSS, authentication bypasses, and unrestricted file uploads, and delivered detailed technical reports to the clients, including vulnerability description, associated impact, severity, reproducing steps, and fixing recommendations.
- Enhancing practical expertise through Capture-The-Flag (CTF) and learning exercises on multiple platforms, such as HackTheBox and PentesterLab, and doing continuous research on emerging cybersecurity trends.
- Conducting regular vulnerability assessments and penetration tests for various applications, networks and systems, and develop clear and detailed security assessment reports to application owners and stakeholders.
- Conducting Internal Security Audits for different organization systems, participating in external security audits, and following up mitigation and fixing processes for discovered security vulnerabilities.
- Hands-on experience conducting and managing security testing and vulnerability scanning using various commercial and open source security tools and scanners, such as Nessus, Nmap, Burp Suite and Nuclei.
- Delivered technical training and mentoring to junior engineers, participating in Information Security awareness campaigns to users and employees in different departments, and assisting new members of the security teams through sessions and knowledge transfer.