Aymane Said

Performed comprehensive penetration tests on web applications, mobile applications, and payment solutions, with precise identification of vulnerabilities and assessment of their real impact.

Wrote clear, actionable technical and executive reports tailored to different decision-making levels.

Integrated SAST/DAST solutions (Checkmarx) into the SDLC to improve early vulnerability detection and elevate development security standards.

Supported development teams: proposed fixes, explained risks, and monitored remediation to ensure sustainable reduction of the attack surface.

Conducted penetration tests on web applications, mobile applications, and network infrastructures, identifying attack vectors and analyzing their impact.

Assessed network security through firewall configuration tests, segmentation, and equipment hardening to verify the effectiveness of existing controls.

OSINT services aimed at mapping publicly exposed assets and detecting external risks before exploitation.

Vulnerability analyses with Nessus, providing a clear view of the risk level and facilitating the prioritization of corrective actions.

Monitored patch management, ensuring regular application of patches and continuous reduction of attack surfaces.

Reverse engineered obfuscated Android applications, including code analysis, understanding protection mechanisms, and identifying suspicious or vulnerable behaviors.

Developed an automated static analysis tool for Android applications in Python, accelerating vulnerability detection and optimizing audit workflows.