Looking for a job

isra mabrouk

@isramabrouk

Message

I test web applications and APIs, uncovering OAuth2, JWT, and authorization vulnerabilities.

Tunisia

Message

What I'm looking for

I'm seeking a short-term cybersecurity internship immediately or a longer-term PFE placement from January 2027, focused on web application and API penetration testing.

I'm a cybersecurity engineering student focused on web application and API penetration testing. I built and attacked a self-hosted OAuth2/OIDC lab, chaining an open redirect with JWT algorithm confusion to bypass authentication.

I created a concurrent Python fuzzer that surfaced BOLA, mass assignment, and broken function-level authorization issues, then documented exploit chains and remediation guidance in a penetration-test-style report.

My software engineering internships at Retalk and Gexpertise gave me practical experience building REST APIs, Python automation, MongoDB-backed tools, and systems I now approach from a security-testing perspective.

Experience

Work history, roles, and key accomplishments

Python Developer Intern

Gexpertise

Jun 2025 - Aug 2025 (2 months)

Part of a 2-person team building GexApp, an internal tool for processing 3D floor-plan/point-cloud data using Python, Potree, and Open3D, backed by MongoDB. Developed Python scripts to automate parts of the 3D floor-plan processing pipeline, including validation and handling of malformed input files.

Python Potree Open3D MongoDB Automation

Backend Developer Intern

Retalk

Jan 2024 - May 2024 (4 months)

Built backend REST APIs in NestJS (TypeScript) with MongoDB for a web-based page builder, enabling users to drag-and-drop UI components to construct pages dynamically.

NestJS TypeScript MongoDB REST APIs