Web Application Penetration Tester
• OFFENSIVE SECURITY & VULNERABILITY RESEARCHComputer Engineering student at the Lebanese American University (LAU) with a relentless focus on Offensive Security, Low-Level Systems, Binary Exploitation, and Competitive Programming.
Education
Academic degree, university affiliation, and computer engineering curriculum.
Bachelor of Engineering (B.E.) in Computer Engineering
Undergraduate Program // In ProgressPursuing a comprehensive Computer Engineering degree focused on low-level computing architectures, offensive cybersecurity, binary exploitation, and algorithmic problem solving.
- › Offensive Security Research: Applied penetration testing, web API vulnerability assessments, and binary reverse engineering.
- › Systems & Hardware: Microcontroller integration, access control architecture diagnostics, and embedded systems.
Professional Experience
Cybersecurity roles, enterprise IT infrastructure, access control diagnostics, and hardware security operations.
OpenKaram
IT and CyberSecurity Associate
Part-time- > Architecting and monitoring digital and physical access control policies to guarantee the principle of least privilege.
- > Executing scheduled and ad-hoc ethical hacking assessments and vulnerability scans on internal infrastructure.
- > Maintaining operational reliability, threat mitigation protocols, and secure system configurations.
Cybersecurity Intern
Internship- > Conducted hands-on ethical hacking simulations, port scanning, and workstation endpoint diagnostics.
- > Administered Microsoft 365 security policies, identity management, multi-factor authentication (MFA), and safe collaboration tools.
- > Collaborated with engineers in reviewing vulnerability logs and drafting defense-in-depth remediation guidelines.
Mac-Corp
Student Intern
Internship- > Assisted in the installation and setup of new fire alarm systems to ensure compliance with safety standards.
- > Performed diagnostics and repairs on malfunctioning access control systems.
- > Supported the planning of infrastructure and system upgrades, contributing to improved reliability and efficiency.
- > Conducted routine testing and maintenance of fire alarm systems to maintain operational readiness.
Featured Projects
Production web engineering, edge architecture, Cloudflare Workers deployment, and modern full-stack implementation.
Designer Portfolio
Created and setup a full website start to finish using Cloudflare, Cloudflare Workers, GitHub, React, and Tailwind CSS.
- › Full-lifecycle development: Engineered, styled, and deployed a modern high-performance design portfolio website from start to finish.
- › Edge architecture: Hosted and served via Cloudflare Workers edge network with continuous integration and deployment (CI/CD) automated through GitHub Actions.
- › Clean responsive UI: Crafted dynamic, responsive components using React and Tailwind CSS with fluid typography, responsive layout scaling, and optimized asset delivery.
Bug Bounty & Security Disclosures
Identified vulnerabilities responsibly coordinated and resolved in external cloud infrastructure and web APIs.
SchoolMouv.fr
Unauthorized Access to API — Discovered and responsibly disclosed an Broken Object Level Authorization (BOLA / IDOR) access control vulnerability, permitting unauthenticated entities to query sensitive protected backend endpoints. CVSS 3.1 Base Score: 7.5 (High Severity).
Exposed Amazon S3 Bucket — Identified an inadequately secured public AWS S3 bucket holding private production assets, violating cloud principle of least privilege. Remediated in coordination with vendor. CVSS 3.1 Base Score: 7.5 (High Severity).
Certifications
Accredited industry certifications with official credential verification and proof documentation.
Microsoft Office Specialist
- • Microsoft Office Word 2016 Certification
- • Official Verification Credential ID: CzLR-DwB9
Honors and Awards
Competitive programming championships, national mathematics Olympiads, cybersecurity CTFs, and engineering competitions.
LCPC (Lebanon) / ICPC Collegiate Programming Contest
Pre-university achievement: First Place at the Lebanese Collegiate Programming Contest (LCPC) Championship (Sep 2023).
Demonstrated advanced algorithmic problem solving, graph theory, dynamic programming, and high-speed problem execution under contest constraints.
Olympiades Nationales de Mathématiques
National Mathematics Olympiad testing analytical rigor, number theory, geometry, and combinatorics.
Engineering Summer Camp Competition
Formulated and engineered micro-controller robotic vehicles for competitive autonomous and wireless racing.
Microsoft Office Specialist Championship
National championship testing precision speed and technical execution in office document architecture.
National Cybersecurity CTF Competition
High-intensity Capture the Flag competition covering reverse engineering, binary exploitation, web vulnerabilities, and network analysis.
Concours national 2025, Vision quantique
National scientific & quantum technology competition focusing on quantum computing concepts and technical vision.
Programming Competition for High School Students
Competitive programming contest solving advanced data structure and algorithmic challenges.
Alkindi Cybersecurity Challenge
National cryptography and cryptanalysis challenge deciphering encrypted communication channels and ciphers.
Courses & Technical Programs
Specialized technical training across robotics instrumentation, offensive ethical hacking, embedded systems, and algorithmic software engineering.
Robotics & Coding Course
Feb - Mar 2025- › Learned the core fundamentals of Python programming and Tkinter GUI development.
- › Gained direct hands-on experience controlling a DOBOT Magician V2 multi-axis robotic arm through custom code.
- › Programmed the robotic arm to execute precision physical tasks, including interacting with a wire loop game, prioritizing motor control and sensor feedback loops.
Ethical Hacking Course
Jan - Mar 2025- › Mastered foundational offensive security methodologies: XSS, SQL injection, directory traversal, session hijacking, and credential brute-forcing.
- › Hands-on lab instrumentation utilizing industry tools: Burp Suite Professional, Nmap, Python scripts, Bash automation, and hardened Linux distributions.
- › Analyzed and exploited key vulnerability classes delineated in the OWASP Top 10 web application security standard.
Engineering Summer Camp
July 2023- › Designed, wired, coded, and deployed remotely controlled micro-vehicles utilizing Arduino microcontrollers, validated in a competitive Formula 1-style track trial.
- › Built practical competencies across embedded hardware development, sensor telemetry, motor drivers, and collaborative engineering.
Python Coding Course
Feb - May 2023- › Intensive Saturday coursework focused on core Python syntax, algorithmic time/space optimization, and recursive problem-solving.
- › Directly trained for competitive programming tournaments, culminating in the AUST Competitive Programming Contest.