03 — Work
Full work history.
Elm — DevSecOps Resident Engineer
Principal Application Security Consultant. Led enterprise-wide application security and DevSecOps initiatives, embedding security across the SDLC for cloud-native and on-prem environments. SAST/DAST/IAST tuning and administration, CI/CD security automation, Application Maturity Assessment, PAMM analysis by Synopsys. Engaged through AppSec, which placed me at Elm on an outsourced basis from Oct 2024.
AppSec — Application Security Consultant
Provided application security services for AppSec customers: threat modeling assessments for applications and cloud, and mobile/API/web penetration testing. From Oct 2024, this contract placed me at Elm on an outsourced basis (see above).
Fawry Banking & Payment Technology — Staff Application Security / Team Lead
Team Leader for Fawry's Application Security Team (FAST) and Vulnerability Management (VMR). PCI ASV scan review, SSDLC planning with Agile Scrum teams, penetration testing across mobile/web/network/POS devices, DevSecOps planning (SCA/SAST/DAST/IAST/container security).
Fawry Banking & Payment Technology — Senior Application Security Engineer
Application security engineering within Fawry's security team.
Fawry Banking & Payment Technology — Application Security Engineer
Application security engineering within Fawry's security team.
Cloud Consultancy (Egypt) — Cyber Security Engineer / Penetration Tester
Internal & external network pentesting, web and mobile application pentesting, written reporting and retesting. Methodologies: OWASP, NIST, SAMA.
Next Technology Leaders (NTL) — Cyber Security Specialization, Intern
Code vulnerability analysis, applied cryptography, hardware security, and security integration across every layer.
Want more detail? See the full history on LinkedIn →