AR
cat cv.html
Security-Focused Software Engineer

Security-focused software engineer, full-stack developer, and vulnerability researcher based in Riyadh. Experienced in building practical web systems, testing real attack surfaces, and hardening the infrastructure behind them.

Experience

Experience

  1. SITE

    Software Engineer

    2026 - Present
    • Designed and developed a cybersecurity exercise and assessment platform to deliver cyber exercises, simulations, and assessments.
    • Built features for exercise management, participant engagement, assessment workflows, and performance tracking.
    • Collaborated with stakeholders to translate cybersecurity training and evaluation requirements into scalable platform capabilities.
    • Contributed to platform architecture, backend services, security controls, and deployment processes.
    Cybersecurity
    Platform Architecture
    Training
    Exercises
    Full Stack Development
    DevOps
    AI
  2. Moqraraty | Riyadh (Remote/Hybrid)

    Backend Developer & Security Tester

    2024 - Present
    • Built and maintained backend services with validation, authorization, and secure data-flow practices.
    • Performed targeted web/API penetration testing and identified misconfigurations and input validation gaps.
    • Improved deployment reliability and hardening across Docker, Nginx, logs, and metrics.
    • Supported a growing education platform serving more than 30,000 users.
    Docker
    Nginx
    API Security
    Penetration Testing
    Express.js
    PostgreSQL
    SQLite
  3. Bugbounty.sa

    Security Researcher

    2024 - 2025
    • Researches and reports web security vulnerabilities through responsible disclosure workflows.
    • Applies practical testing methodology across common web and API attack surfaces.
    Web Security
    API Security
    Responsible Disclosure
  4. Information Security Club (infosecclub) | University Community

    Volunteer Security Researcher

    2024 - 2026
    • Conducted vulnerability research, knowledge sharing, and CTF challenge development.
    • Participated with CCISinfosecclub in research writing and building web CTF challenges.
    Vulnerability Research
    CTF
    Research Writing
  5. Qubes\Neyam | Riyadh (Remote/Hybrid)

    Software Engineer Specialist

    2024 - 2025
    • Contributed to the development of the Neyam Salla Theme and the Shopify theme for e-commerce.
    • Collaborated on the Neyam Data Warehouse initiative.
    Salla
    Shopify
    Data Warehouse
  6. Ejad Club | University

    Volunteer Full-Stack Developer

    2024 - 2025
    • Helped build Ejad Sh3bh, a class and group management website, as a full-stack contributor.
    Full-Stack Development
    Web Development

Credentials

Credentials

eJPT

INE / eLearnSecurity

eLearnSecurity Junior Penetration Tester with entry-level red team skills and real-world style labs.
Verify credential
eWPT

INE / eLearnSecurity

eLearnSecurity Web Application Penetration Tester focused on web vulnerabilities and methodology.
Verify credential
eCPPT

INE / eLearnSecurity

eLearnSecurity Certified Professional Penetration Tester covering network, web, AD, and reporting.
Verify credential

Achievements

Achievements

Top 10
CyberHub university ranking
Top 300
FlagYard global ranking
Top 100
BlackHat MEA CTF 2024 global event team
Top 2%
TryHackMe global ranking

Projects

Projects

Moqraraty logo
moqraraty.com
Moqraraty
App that supports and simplifies the student journey
Open site
Ejad Sh3bh logo
ejad.sh3bh.com
Ejad Sh3bh
Class and group management platform for Ejad Club
Open site
Sh3bh logo
sh3bh.com
Sh3bh
Class and group management platform
Open site
Neyam logo
Neyam Website
Neyam
Salla Theme Shopping Website for Neyam products
Edualizer logo
edualizer.video
Edualizer
Platform to create videos using code with AI
Open site
STEMREF logo
stemref.askardesign.com
STEMREF
Educational platform for university students
Lagpsy logo
lagpsy.vercel.app
Lagpsy
Mental health and gaming awareness initiative

Skills

Skills

Web/App Security
XSS, SQLi, CSRF, CORS, SSRF, XXE, SSTI, API security testing, HTTP Smuggling, Race Condition, OWASP
Pentest Tooling
Nmap, Gobuster, SQLMap, Burp Suite, ffuf, Caido
Platforms & OS
Linux, Nginx, Docker
Programming
HTML, CSS, JavaScript/TypeScript, Python, React, Next.js, Node.js, Express.js, FastAPI
Databases
PostgreSQL, SQL, SQLite, MongoDB
Version Control & CI/CD
Git, GitHub, branching workflows, pull requests, GitHub Actions, build and deployment pipelines
MarTech/Tech
Liquid, Braze, Twilight
Soft Skills
Teamwork, collaboration, positive attitude, strong communication
Education
Imam Mohammad Ibn Saud Islamic University (Imamu)

GPA: 4.82 / 5

Languages
ArabicNative
EnglishProfessional working proficiency
A222 © 2026