Open to opportunities

Mohamed Barrous

@mohamedbarrous

Message

OSCE3-certified cybersecurity consultant specializing in offensive security and penetration testing.

Morocco

Message

What I'm looking for

I seek offensive-security roles where I can conduct high-impact penetration tests, develop exploits, mentor teams, and deliver actionable remediation—remote or open to relocation.

I am an OSCE3-certified cybersecurity consultant with 3.5 years of hands-on experience in offensive security, specializing in web application testing, infrastructure penetration testing, and secure code review. I have identified complex vulnerabilities including authentication bypass, logic flaws, SSRF, RCE, and Active Directory attack vectors, and I deliver clear technical reports and remediation plans for clients across finance, telecom, and government sectors.

I have worked as a bug bounty hunter on a red team platform and as a mid-level consultant leading infrastructure tests and secure code reviews, contributing to tooling and process improvements while collaborating across teams. I am fluent in English, French, and Arabic, and I am open to relocation or remote onboarding for high-impact engagements.

Experience

Work history, roles, and key accomplishments

Current

Bug Bounty Hunter

Current

Synack

Jun 2024 - Present (1 year 4 months)

Conducted targeted assessments of web, infrastructure, and endpoint environments, identifying high-impact vulnerabilities (authentication bypass, logic flaws, RCE) and delivering actionable remediation guidance to enterprise clients.

Burp suite RCE Technical Reporting Exploit Development

Current

Cybersecurity Consultant

Current

Dataprotect

Sep 2023 - Present (2 years 1 month)

Led internal and external infrastructure penetration tests across Windows and Linux, assessed mobile and web applications, and performed secure code reviews that uncovered logic flaws and injection points for clients in finance, telecom, and government.

Penetration Testing Application Security Code Review Burp suite OWASP ZAP Python Technical Reporting Windows Linux

Junior Cybersecurity Consultant

LMPS Group

May 2022 - Aug 2023 (1 year 3 months)

Executed vulnerability scans and manual penetration tests, conducted secure code audits focused on business logic and input validation, and documented findings in detailed technical reports while supporting remediation workshops.

Vulnerability Testing Penetration Testing Technical Reporting Python BASH Process Improvement