Security-Focused Software Engineer
Security-focused software engineer, full-stack developer, and vulnerability researcher based in Riyadh. Experienced in building practical web systems, testing real attack surfaces, and hardening the infrastructure behind them.
Experience
Experience
Software Engineer
SITE
2026 - Present
- Designed and developed a cybersecurity exercise and assessment platform for HCD to deliver cyber exercises, simulations, and assessments.
- Built features for exercise management, participant engagement, assessment workflows, and performance tracking.
- Collaborated with stakeholders to translate cybersecurity training and evaluation requirements into scalable platform capabilities.
- Contributed to platform architecture, backend services, security controls, and deployment processes.
Backend Developer & Security Tester
Moqraraty | Riyadh (Remote/Hybrid)
2024 - Present
- Built and maintained backend services with validation, authorization, and secure data-flow practices.
- Performed targeted web/API penetration testing and identified misconfigurations and input validation gaps.
- Improved deployment reliability and hardening across Docker, Nginx, logs, and metrics.
- Supported a growing education platform serving more than 30,000 users.
Vulnerability Researcher
Bugbounty.sa
2024 - Present
- Researches and reports web security vulnerabilities through responsible disclosure workflows.
- Applies practical testing methodology across common web and API attack surfaces.
Volunteer Security Researcher
Information Security Club (infosecclub) | University Community
2024 - 2026
- Conducted vulnerability research, knowledge sharing, and CTF challenge development.
- Participated with CCISinfosecclub in research writing and building web CTF challenges.
Software Engineer
Qubes | Riyadh (Remote/Hybrid)
2024 - 2025
- Contributed to the development of the Neyam Salla Theme and the Shopify theme for e-commerce.
- Collaborated on the Neyam Data Warehouse initiative.
Volunteer Full-Stack Developer
Ejad Club | University
2024 - 2025
- Helped build Ejad Sh3bh, a class and group management website, as a full-stack contributor.
Credentials
Credentials
eJPT
INE / eLearnSecurity
eLearnSecurity Junior Penetration Tester with entry-level red team skills and real-world style labs.
Verify credentialeWPT
INE / eLearnSecurity
eLearnSecurity Web Application Penetration Tester focused on web vulnerabilities and methodology.
Verify credentialeCPPT
INE / eLearnSecurity
eLearnSecurity Certified Professional Penetration Tester covering network, web, AD, and reporting.
Verify credentialAchievements
Achievements
Top 10
CyberHub university ranking
Top 300
FlagYard global ranking
Top 100
BlackHat MEA CTF 2024 global event team
Top 2%
TryHackMe global ranking
Projects
Projects
moqraraty.com
Moqraraty
App that supports and simplifies the student journey
ejad.sh3bh.com
Ejad Sh3bh
Class and group management platform for Ejad Club
sh3bh.com
Sh3bh
Class and group management platform
Neyam Website
Neyam
Salla Theme Shopping Website for Neyam products
edualizer.video
Edualizer
Platform to create videos using code with AI
Skills
Skills
Web/App Security
XSS, SQLi, CSRF, CORS, SSRF, XXE, SSTI, API security testing, HTTP Smuggling, Race Condition, OWASP
Pentest Tooling
Nmap, Gobuster, SQLMap, Burp Suite, ffuf, Caido
Platforms & OS
Linux, Nginx, Docker
Programming
HTML, CSS, JavaScript/TypeScript, Python, React, Next.js, Node.js, Express.js, FastAPI
Databases
PostgreSQL, SQL, SQLite, MongoDB
Version Control & CI/CD
Git, GitHub, branching workflows, pull requests, GitHub Actions, build and deployment pipelines
MarTech/Tech
Liquid, Braze, Twilight
Soft Skills
Teamwork, collaboration, positive attitude, strong communication
Education
Imam Mohammad Ibn Saud Islamic University (Imamu)2021 - 2026
GPA: 4.82 / 5
Motaqademh School2016 - 2019
Score: 98.95
Languages
ArabicNative
EnglishProfessional working proficiency