At I-Soft, I perform manual web application and API security testing, focusing on authentication, authorization, role-based access control, and business logic. I validate findings such as IDOR and privilege escalation, then document their impact and remediation in security assessment reports.
I also research AppSec tools and how they can fit into Azure DevOps, applying Secure Software Development Lifecycle concepts. I authored an SSDLC guide for development, DevOps, and testing teams.
Earlier, I taught cybersecurity fundamentals and networking at Digital Egypt Creativity & Innovation (DECI), and supported IT systems at White For Real Estate. I’m currently building my Android application penetration testing skills.
