Looking for a job

Mohamed Kamel Bouzekria

@mohamedkamelbouzekri

Senior Penetration Tester at a Security Consulting Firm, piloting AI-assisted pentest campaigns and coordinating remediation.

France

Message

At a Security Consulting Firm, I pilot automated and AI-assisted pentest campaigns using Horizon3 AI, Pentera, and XM Cyber. I challenge tool outputs, identify false positives, and coordinate remediation with Agile delivery teams.

At SII Group, I led penetration test campaigns across web, API, network, and cloud environments. I also contributed to Purple Team exercises, mapping findings to MITRE ATT&CK and recommending detection improvements.

Earlier, I conducted Red Team campaigns and vulnerability research at RealisticSecurity, and directed product security and Bug Bounty operations at 1G22REI. My work spans application, infrastructure, cloud, and mobile security, supported by certifications including OSCP, OSWE, OSEP, OSWP, CRTP, and CRTE.

Experience

Work history, roles, and key accomplishments

Current

Senior Penetration Tester

Current

Security Consulting Firm

Jul 2025 - Present (1 year 3 months)

Piloted automated and AI-assisted pentest campaigns, coordinated manual penetration tests with external vendors, and contributed to Red Team exercise planning and Bug Bounty program design.

Horizon3 Pentera XM Cyber Red Teaming Penetration Testing Agile KPI Dashboards SOC DevSecOps

Senior Penetration Tester

French Startup - Contractor

Nov 2024 - Jun 2025 (7 months)

Executed penetration tests across web, API, mobile, and cloud environments, triaged vulnerability reports, and conducted Red Team scenarios against infrastructure.

Penetration Testing Web Security API Security Mobile Security Cloud Security AWS Inspector GuardDuty Microsoft Defender AWS Security Hub Kubernetes Azure Red Teaming Vulnerability Research

Senior Penetration Tester

SII Group

May 2023 - Nov 2024 (1 year 6 months)

Led penetration test campaigns for clients across web, API, network, and cloud environments, and contributed to Purple Team exercises mapping findings to MITRE ATT&CK.

Penetration Testing Web Security API Security Network Security Cloud Security AWS Azure MITRE ATT&CK Purple Team Docker Kubernetes

Senior Penetration Tester

Realistic Security

Apr 2020 - Feb 2023 (2 years 10 months)

Designed, scoped, and executed Red Team campaigns covering application, infrastructure, network, and social engineering vectors, and led Purple Team exercises with client Blue Teams.

Red Teaming Penetration Testing Social Engineering Exploit Development Purple Team SOC Technical Reporting

Head of Product Security

G22REI

Sep 2019 - Sep 2020 (1 year)

Directed the vulnerability disclosure program and Bug Bounty operations, performed hands-on security testing, and led product security red team efforts.

Responsible Disclosure Bug Bounty Penetration Testing Fuzzing Techniques Cloud Security AWS Red Teaming

Cloud Security Engineer | Pentester

RedFabriQ

Sep 2019 - Feb 2020 (5 months)

Developed and executed security testing methodologies from cloud to embedded device, performed penetration tests on cloud-connected vehicle systems, and conducted security code reviews.

Cloud Security Penetration Testing AWS Firmware Security Code Review Risk Assessment

Cybersecurity Engineer

BRANDT - CEVITAL SPA

Jan 2018 - Jun 2019 (1 year 5 months)

Performed security assessments using SAST and DAST techniques, conducted penetration tests on internal applications and infrastructure, and mentored developers on secure coding.

SAST DAST Penetration Testing Exploit Development Secure Coding Mentorship

Software Engineer

SIRIUSNET

Jun 2017 - Dec 2017 (6 months)

Developed software solutions following established development standards and integration patterns, and unit tested each software component.

Software Development Unit Testing

Malware Researcher Intern

LRILab, University of Science and Technology Houari Boumedie

Sep 2015 - Jul 2016 (10 months)

Analyzed suspicious files using static and dynamic malware analysis techniques, reverse engineered binaries with Ghidra and IDA Pro, and contributed to malware classification automation.

Malware Analysis Reverse Engineering Ghidra IDA Pro Static Analysis Dynamic Analysis