Looking for a job

Mehdi Belhaj Amor

@mehdibelhajamor

Cybersecurity Consultant with 4 years of experience, specializing in penetration testing, with expertise in AppSec, and cryptography.

Tunisia

Message

What I'm looking for

I am seeking opportunities where I can fully leverage my technical expertise to take on challenging security engagements, contribute to impactful projects, and help strengthen the resilience of modern digital infrastructures.

I have delivered more than 80 penetration testing and security assessment engagements for global clients across the financial services, fintech, public sector, healthcare, and telecommunications industries.

At Forvis Mazars, I lead end-to-end penetration testing engagements, from scoping through remediation closure. I also perform manual secure code reviews of Python, PHP, Java, and .NET applications, conduct configuration audits, and supervise junior consultants and interns.

Previously at Keystone Group, I conducted VAPT engagements for government, financial, and telecommunications clients while supporting DFIR activities, including ransomware analysis, evidence collection, compromise assessments, and recovery guidance. As a freelancer, I performed external attack surface assessments for individuals and small businesses and developed offensive security labs and CTF challenges.

I am also an accomplished CTF competitor, with two first-place finishes at the CSAW MENA CTF, as well as a CryptoHack ranking of first in Tunisia and among the top 30 worldwide.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Consultant

Current

Forvis Mazars

Feb 2024 - Present (2 years 6 months)

Executed web, API, mobile, and network penetration tests for global clients, including a Fortune Global 500. Led end-to-end security engagements from scoping to remediation closure. Performed manual code reviews across 10+ applications using SAST/DAST tools, conducted security audits, improved pentesting methodologies, and mentored junior consultants and interns.

Penetration Testing Web Security API Security Mobile Security Network Security Secure Code Review SAST DAST Python PHP Java .NET Cloud Security Azure AWS DevSecOps CI CD GitHub Actions Docker Semgrep CodeQl

Cyber Security Freelancer

Freelance

Dec 2021 - Jan 2024 (2 years 1 month)

Delivered penetration testing services for individuals and small companies, targeting external attack surface. Designed and created offensive security labs and CTF challenges for security professionals.

Penetration Testing Offensive Security CTF Lab Design

Penetration Tester

Keystone Group

Aug 2022 - Dec 2023 (1 year 4 months)

Conducted VAPT engagements for domestic and global clients, including government entities, financial institutions, and telecom operators. Performed application penetration tests for critical systems as part of regulatory compliance audits. Supported DFIR engagements.

Vulnerability Assessment Penetration Testing Application Security Digital Forensics Incident Response

Penetration Testing Intern

Keystone Group

Jun 2022 - Aug 2022 (2 months)

Participated in supervised application penetration testing activities, contributing to vulnerability identification and technical report writing.

Penetration Testing

SOC Automation & Integration Intern

DefensyLab

Jun 2021 - Aug 2021 (2 months)

Developed a Python automation (REST API) integrating RTIR with TheHive to monitor tickets, extract incident metadata and IOCs, and create cases automatically, reducing manual SOC case management effort.

Python REST APIs RTIR SOC Automation Incident Management

Education

Degrees, certifications, and relevant coursework

TEK-UP University

Engineering Degree, Computer Science

2020 - 2023

Grade: 3.7

Engineering Degree in Computer Science with a specialization in Security of Computer Systems and Networks (Cybersecurity). Graduated with Highest Honors and Committee Praise.

INSAT

Integrated Preparatory Cycle, Mathematics, Physics, Computer Science (MPI) and Industrial Computing and Automation (IIA).

2018 - 2020

Grade:

Activities and societies: Technical Manager at Securinets (2020 - 2022), the largest cybersecurity association in Tunisia: leading technical training sessions, and helping organize cybersecurity events and CTF competitions.