Mohamed Bouzekria

• Perform manual and automated Web Application Penetration Testing (DAST), Network Penetration Testing.

• Adhere to the security standards and all policies and procedures identified for the project specified by the organization.

• Conduct comprehensive security testing of mobile applications, develop testing methodologies, and provide actionable recommendations for

vulnerability remediation.

• Prepare and present detailed, written technical information for internal and external audiences.

• Summarize and document results of testing for management reporting including proper disposition of test exceptions

- Perform memory investigations and reverse engineering of malware, analyze and extract IOCs (Indicators of Compromise).

- Regularly perform security reviews of software and processes.

- Review and create threat models.

- Perform security code reviews and educate engineering teams on best practices for writing secure code.

- Conduct application and infrastructure penetration testing, as well as physical security assessments and social engineering tests.

• Conduct targeted penetration tests during exercises and testing events by applying sophisticated attacks targeted as a simulated adversary.

• Participate in event planning stages to develop cybersecurity assessment plans and conduct unannounced penetration tests.

• Create supporting materials for the Red Team (e.g., probabilistic attack graphs, cybersecurity exercise playbooks, etc.).

• Assist in onboarding new Red Team members through job shadowing and knowledge transfer sessions.

• Support the identification of controls to remediate and/or mitigate security weaknesses identified in systems, applications, processes, and procedures.

• Assist the audit manager in determining audit program customization requirements and corresponding program steps.

• Perform dynamic application security testing using both manual and automated testing tools.

• Conduct a wide range of security assessments related to applications, code reviews, mobile applications, and infrastructure.

• Summarize and document test results for management reporting, including proper handling of identified exceptions.