Open to opportunities

Hassham Nagori

@hasshamnagori

Message

I uncover and validate critical security risks across web, mobile, cloud, API, and infrastructure environments.

Oman

Message

What I'm looking for

I'm looking to lead or deliver high-impact offensive security work, connecting penetration testing and red teaming with SOC detection, remediation, governance, and measurable business risk reduction.

I've delivered 300+ application and 100+ network penetration tests, validating real-world risk through manual exploitation, proof-of-concept development, and clear remediation guidance. My vulnerability research includes three published CVEs covering SQL injection and reflected XSS.

At Rewterz, I led Operations & Engineering across SOC, red teaming, threat intelligence, and vulnerability management. I standardized assessment and reporting workflows, aligned offensive testing with Cyber Defence/SOC detection needs, and supported ISO 27001 and NIST governance.

I founded and led IKZERO, a cybersecurity consultancy delivering web, mobile, API, network, and infrastructure penetration testing. I built the service portfolio and consulting team while leading technical delivery, retesting, and regional market expansion.

I've led red-team and social-engineering engagements for banking and enterprise clients, including phishing and physical operations. I'm an OSCP, CISA, and CompTIA Security+ holder, a BlackHat MEA speaker, and an active Synack Red Team member.

Experience

Work history, roles, and key accomplishments

Director, Operations & Engineering

Rewterz

Jan 2025 - Jan 2026 (1 year)

Led operational delivery across cybersecurity service lines including SOC, red teaming, threat intelligence, and vulnerability management. Standardized assessment workflows and aligned offensive-security outputs with Cyber Defence requirements.

SOC Red Teaming Threat Intelligence Vulnerability Management ISO 27001 NIST Detection Gap Validation Reporting

Founder & CEO / Principal Security Consultant

IKZERO

Oct 2020 - Jan 2025 (4 years 3 months)

Founded and led a cybersecurity consultancy delivering penetration testing across web, mobile, API, network, and infrastructure. Performed manual exploitation and developed PoCs to validate critical findings and business impact.

Penetration Testing PoC Development Risk Assessment Reporting Team Management Business Strategy

Senior Information Security Consultant

Rewterz

Jan 2018 - Sep 2020 (2 years 8 months)

Delivered end-to-end penetration tests, identifying vulnerabilities and architectural weaknesses with strong manual validation. Led red-team engagements and social-engineering operations for banking and enterprise clients.

Penetration Testing Red Teaming Social Engineering Mobile Application Testing remediation

Information Security Consultant

Rewterz

Jan 2016 - Dec 2017 (1 year 11 months)

Conducted web, mobile, API, and infrastructure assessments, producing evidence-driven reports and remediation guidance.

Web Application Testing Mobile Testing API Testing Infrastructure Testing Reporting

Security Consultant & SOC L2 Analyst

Rewterz

Aug 2014 - Dec 2015 (1 year 4 months)

Supported 24x7 SOC operations and SIEM investigations, deploying and integrating SIEM platforms. Improved monitoring visibility and alert fidelity through SOP and reporting enhancements.

SOC Operations SIEM RSA Security Analytics ELK Kibana Incident Response Training