At ZeroSploit, I perform manual and automated penetration testing across applications, networks, APIs, and IoT devices, then report findings with risk levels and remediation recommendations.
My IoT assessments span web, mobile, network, firmware, and hardware security. I discovered security issues in a PAX Technologies POS device, a high-severity vulnerability affecting multiple Yealink Technology IP Phone versions, and multiple critical vulnerabilities in Fanvil IP Phones.
I also assess web, mobile, network, and desktop application security, including source code review and reverse engineering. My work has included identifying a memory corruption vulnerability in a popular Kali Linux tool.
At Roboost, I worked part-time as an Application Security Engineer, supporting security across company assets and working with development and DevOps teams to integrate security into the SDLC. I also taught number theory and cryptography at Ain-Shams University.

