# Ali Naim — Web Application Penetration Tester

> Driven to Master Cybersecurity & Advanced Engineering

## Profile & Contact Information
- **Full Name**: Ali Naim
- **Professional Focus**: Web Application Penetration Tester
- **University**: Lebanese American University (LAU)
- **Location**: Beirut, Lebanon
- **Direct Email**: alihusseinnaim2007@gmail.com
- **Resume / CV (PDF)**: https://alinaim.dev/assets/CV/CV_25.pdf

### Verified Offensive Security & Coding Profiles
- **GitHub**: https://github.com/alinaim07
- **Hack The Box**: https://app.hackthebox.com/users/virus360
- **LeetCode**: https://leetcode.com/u/alinaim07/
- **HackerOne**: https://hackerone.com/virus360
- **TryHackMe**: https://tryhackme.com/p/virous360
- **LinkedIn**: https://www.linkedin.com/in/alinaim2007/
- **WhatsApp**: https://wa.me/alinaim07

## Executive Summary & Background
Computer Engineering student at the Lebanese American University (LAU) with a relentless focus on Offensive Security, Low-Level Systems, Binary Exploitation, and Competitive Programming.

## Professional Experience

### IT and CyberSecurity Associate — OpenKaram
- **Location**: Hazmieh, Mount Lebanon Governorate, Lebanon · Hybrid
- **Period**: Apr 2026 – Present
- **Employment Type**: Part-time

**Key Responsibilities & Accomplishments**:
- Dual-phase tenure at OpenKaram advancing from Cybersecurity Intern to IT & CyberSecurity Associate.
- Overseeing organizational access control architecture, cybersecurity threat surface minimization, and network diagnostics.
- Conducting vulnerability testing, system monitoring, and ethical hacking assessments across digital assets.

**Tenure Roles**:
- **IT and CyberSecurity Associate** (Jul 2026 – Present · Part-time)
  - Architecting and monitoring digital and physical access control policies to guarantee the principle of least privilege.
  - Executing scheduled and ad-hoc ethical hacking assessments and vulnerability scans on internal infrastructure.
  - Maintaining operational reliability, threat mitigation protocols, and secure system configurations.
- **Cybersecurity Intern** (Apr 2026 – Jun 2026 · Internship)
  - Conducted hands-on ethical hacking simulations, port scanning, and workstation endpoint diagnostics.
  - Administered Microsoft 365 security policies, identity management, multi-factor authentication (MFA), and safe collaboration tools.
  - Collaborated with engineers in reviewing vulnerability logs and drafting defense-in-depth remediation guidelines.

**Technologies & Domains**: Access Control, Ethical Hacking, Office 365, Network Security, Vulnerability Assessment, Threat Mitigation, System Administration

### Student Intern — Mac-Corp
- **Location**: Beirut, Lebanon · On-site
- **Period**: Jun 2023
- **Employment Type**: Internship

**Key Responsibilities & Accomplishments**:
- Assisted in the installation and setup of new fire alarm systems to ensure compliance with safety standards.
- Performed diagnostics and repairs on malfunctioning access control systems.
- Supported the planning of infrastructure and system upgrades, contributing to improved reliability and efficiency.
- Conducted routine testing and maintenance of fire alarm systems to maintain operational readiness.

**Tenure Roles**:
- **Student Intern** (Jun 2023 · Internship)
  - Assisted in the installation and setup of new fire alarm systems to ensure compliance with safety standards.
  - Performed diagnostics and repairs on malfunctioning access control systems.
  - Supported the planning of infrastructure and system upgrades, contributing to improved reliability and efficiency.
  - Conducted routine testing and maintenance of fire alarm systems to maintain operational readiness.

**Technologies & Domains**: Access Control Diagnostics, Fire Alarm Systems, Infrastructure Upgrades, Safety Compliance

## Education

### Bachelor of Engineering (B.E.) in Computer Engineering
- **Institution**: Lebanese American University (LAU)
- **Location**: Beirut, Lebanon
- **Period**: 2025 - Present
- **Status**: Undergraduate Program // In Progress

Pursuing a comprehensive Computer Engineering degree focused on low-level computing architectures, offensive cybersecurity, binary exploitation, and algorithmic problem solving.

**Academic Highlights**:
- Offensive Security Research: Applied penetration testing, web API vulnerability assessments, and binary reverse engineering.
- Systems & Hardware: Microcontroller integration, access control architecture diagnostics, and embedded systems.

**Core Coursework**: Computer Architecture, Data Structures & Algorithms, Operating Systems, Computer Networks, Microprocessors & Embedded Systems, Object-Oriented Programming, Cybersecurity Fundamentals

## Featured Projects & Tooling

### Designer Portfolio
- **Category**: Web Engineering & Architecture
- **Timeline**: Jun 2026 – Jul 2026
- **Repository / Link**: https://theadaher.com

Created and setup a full website start to finish using Cloudflare, Cloudflare Workers, GitHub, React, and Tailwind CSS.

**Technical Architecture & Capabilities**:
- Full-lifecycle development: Engineered, styled, and deployed a modern high-performance design portfolio website from start to finish.
- Edge architecture: Hosted and served via Cloudflare Workers edge network with continuous integration and deployment (CI/CD) automated through GitHub Actions.
- Clean responsive UI: Crafted dynamic, responsive components using React and Tailwind CSS with fluid typography, responsive layout scaling, and optimized asset delivery.

**Core Technologies**: React, Tailwind CSS, Cloudflare Workers, GitHub Actions, CSS3, HTML5, Web Architecture, Edge Deployment

## Bug Bounty & Security Research Disclosures

### SchoolMouv.fr
- **Platform / Program**: SchoolMouv.fr Security Response
- **Date**: Feb 2025

**Vulnerability Assessment & Scope**:
- Unauthorized Access to API — Discovered and responsibly disclosed an Broken Object Level Authorization (BOLA / IDOR) access control vulnerability, permitting unauthenticated entities to query sensitive protected backend endpoints. CVSS 3.1 Base Score: 7.5 (High Severity).
- Exposed Amazon S3 Bucket — Identified an inadequately secured public AWS S3 bucket holding private production assets, violating cloud principle of least privilege. Remediated in coordination with vendor. CVSS 3.1 Base Score: 7.5 (High Severity).

## Professional Security Certifications

### Microsoft Office Specialist
- **Issuing Body**: Microsoft
- **Issue Date**: Jul 2021
- **Credential ID**: CzLR-DwB9

**Competencies Validated**:
- Microsoft Office Word 2016 Certification
- Official Verification Credential ID: CzLR-DwB9

## Honors, Awards & Competitive Achievements

### LCPC (Lebanon) / ICPC Collegiate Programming Contest (First Place)
- **Organizer / Host**: American University of Beirut (AUB)
- **Date**: Sep 2023

**Achievement Details**:
- Pre-university achievement: First Place at the Lebanese Collegiate Programming Contest (LCPC) Championship (Sep 2023).
- Demonstrated advanced algorithmic problem solving, graph theory, dynamic programming, and high-speed problem execution under contest constraints.

### Olympiades Nationales de Mathématiques (Mention Très Bien)
- **Organizer / Host**: AEFE
- **Date**: May 2024

**Achievement Details**:
- National Mathematics Olympiad testing analytical rigor, number theory, geometry, and combinatorics.

### Engineering Summer Camp Competition (First Place)
- **Organizer / Host**: American University of Science and Technology (AUST)
- **Date**: Jul 2023

**Achievement Details**:
- Formulated and engineered micro-controller robotic vehicles for competitive autonomous and wireless racing.

### Microsoft Office Specialist Championship (Second Place in Lebanon)
- **Organizer / Host**: Microsoft / Lebanon
- **Date**: Jul 2021

**Achievement Details**:
- National championship testing precision speed and technical execution in office document architecture.

### National Cybersecurity CTF Competition (Third Place)
- **Organizer / Host**: AUST
- **Date**: 2 May 2025

**Achievement Details**:
- High-intensity Capture the Flag competition covering reverse engineering, binary exploitation, web vulnerabilities, and network analysis.

### Concours national 2025, Vision quantique (Third Place)
- **Organizer / Host**: Université Saint-Joseph (USJ)
- **Date**: 23 April 2025

**Achievement Details**:
- National scientific & quantum technology competition focusing on quantum computing concepts and technical vision.

### Programming Competition for High School Students (Third Place)
- **Organizer / Host**: AUST
- **Date**: Apr 2023

**Achievement Details**:
- Competitive programming contest solving advanced data structure and algorithmic challenges.

### Alkindi Cybersecurity Challenge (10th Place in Lebanon)
- **Organizer / Host**: AEFE
- **Date**: Feb 2023

**Achievement Details**:
- National cryptography and cryptanalysis challenge deciphering encrypted communication channels and ciphers.

## Specialized Courses & Technical Training

### Robotics & Coding Course
- **Institution / Platform**: American University of Science and Technology (AUST)
- **Date**: Feb - Mar 2025

**Curriculum Highlights**:
- Learned the core fundamentals of Python programming and Tkinter GUI development.
- Gained direct hands-on experience controlling a DOBOT Magician V2 multi-axis robotic arm through custom code.
- Programmed the robotic arm to execute precision physical tasks, including interacting with a wire loop game, prioritizing motor control and sensor feedback loops.

### Ethical Hacking Course
- **Institution / Platform**: SecureChek
- **Date**: Jan - Mar 2025

**Curriculum Highlights**:
- Mastered foundational offensive security methodologies: XSS, SQL injection, directory traversal, session hijacking, and credential brute-forcing.
- Hands-on lab instrumentation utilizing industry tools: Burp Suite Professional, Nmap, Python scripts, Bash automation, and hardened Linux distributions.
- Analyzed and exploited key vulnerability classes delineated in the OWASP Top 10 web application security standard.

### Engineering Summer Camp
- **Institution / Platform**: AUST
- **Date**: July 2023

**Curriculum Highlights**:
- Designed, wired, coded, and deployed remotely controlled micro-vehicles utilizing Arduino microcontrollers, validated in a competitive Formula 1-style track trial.
- Built practical competencies across embedded hardware development, sensor telemetry, motor drivers, and collaborative engineering.

### Python Coding Course
- **Institution / Platform**: AUST
- **Date**: Feb - May 2023

**Curriculum Highlights**:
- Intensive Saturday coursework focused on core Python syntax, algorithmic time/space optimization, and recursive problem-solving.
- Directly trained for competitive programming tournaments, culminating in the AUST Competitive Programming Contest.

---
*Document generated for AI agents via Cloudflare "Markdown for Agents" content negotiation (`Accept: text/markdown`).*
*Direct live HTML portfolio: https://alinaim.dev/*