Open to opportunities

Moamen Mahmod

@moamenmahmod

Message

Self-taught cybersecurity specialist and backend developer focused on web security.

Egypt

Message

What I'm looking for

I seek roles focused on web/API security and secure backend development, with collaborative teams, clear remediation impact, and growth toward senior security engineering or research.

I am a motivated, self-taught cybersecurity specialist and backend developer with a strong focus on web application and API security. I combine hands-on bug bounty hunting experience with backend development skills to discover and remediate vulnerabilities.

I have practical experience finding high-severity bugs and reporting dozens of vulnerabilities, and I have engaged directly with security teams at major vendors. I prioritize secure software development and defensive strategies alongside advanced exploitation techniques.

My technical toolbox includes manual testing, automation scripting with Python and Bash, and deep familiarity with OWASP Top 10, business logic flaws, IDOR, broken access control, and privilege escalation. I also work with REST and GraphQL architectures and exploit mitigations such as rate limiting and field-level authorization.

I hold a B.Sc. in Computer and Information Science (dual degree: Ain Shams University and University of East London, expected 2025) and have won a security-focused web app competition. I am eager to apply my expertise in vulnerability discovery, advanced exploitation, and defensive engineering in a professional environment.

Experience

Work history, roles, and key accomplishments

Backend Developer

Independent / Freelance

Developed multiple full-stack projects with a focus on secure backend development using Flask and PHP, implementing secure session handling, TLS/HTTPS, and access control patterns (RBAC/ABAC, JWT, OAuth2).

Flask PHP TLS JWT OAUTH2 RBAC Session Management Secure Coding Networking

Bug Hunter / Security Specialist

Independent / Freelance

Self-taught cybersecurity specialist and bug bounty hunter focused on web application and API security; discovered high-severity vulnerabilities including four in Epic Games and reported 30+ issues across major platforms. Won 1st place in a security-focused web app competition and routinely engage with vendor security teams to validate and remediate findings.

Vulnerability Discovery OWASP Top 10 IDOR Manual Testing Python BASH

Education

Degrees, certifications, and relevant coursework

Ain Shams University & University of East London (Dual Degree)

Bachelor of Science, Computer and Information Science

Grade: GPA: 3.073

Activities and societies: Multiple full-stack projects; security-focused web app competition (1st place); bug bounty hunting and vulnerability reporting (found high-severity bugs in major platforms)

B.Sc. in Computer and Information Science dual degree program combining coursework from Ain Shams University and the University of East London, focusing on computer science and information systems; graduated in 2025 with practical project experience in web and API security.