Open to opportunities

Mohamed Elkashawi

@mohamedelkashawi

Message

I find and report web and network security vulnerabilities through practical penetration testing.

Egypt

Message

What I'm looking for

I'm looking for a penetration testing or vulnerability analysis role where I can assess web and network environments, report security findings responsibly, and continue developing practical offensive security skills.

I've conducted security assessments across public bug bounty and vulnerability disclosure programs, including HackerOne, YesWeHack, and self-hosted programs. I've responsibly reported issues such as broken access control, privilege escalation, SSRF, SSTI, path traversal, information disclosure, and race conditions.

I'm currently delivering hands-on penetration testing and cybersecurity fundamentals training through NTI's Digital Egypt Pioneers Initiative. I teach reconnaissance, vulnerability assessment, exploitation, and reporting methodologies.

My practical focus spans web and network penetration testing, OWASP Top 10 testing, API security, Active Directory basics, and security event investigation using tools including Burp Suite, Nmap, Wireshark, Metasploit, Splunk, and Wazuh.

Experience

Work history, roles, and key accomplishments

Penetration Testing Instructor

National Telecommunication Institute (NTI)

Jun 2026 - Aug 2026 (2 months)

Delivered hands-on training in penetration testing and cybersecurity fundamentals as part of the Digital Egypt Pioneers Initiative (DEPI). Taught practical penetration testing methodologies, including reconnaissance, vulnerability assessment, exploitation, and reporting.