montasir maged

I've secured web applications, APIs, CI/CD pipelines, containers, and AWS environments across enterprise and government projects. At Loma, I embed security validation into development and release cycles while reviewing code, pipelines, Dockerfiles, and cloud configurations.

I conduct hands-on Web and API assessments focused on business logic flaws, broken access control, IDOR, authentication weaknesses, and exploitable risks. I validate SAST and DAST findings, reduce false positives, and provide remediation guidance that helps development teams prevent recurring vulnerabilities.

Previously, I delivered PoC-backed penetration-testing findings at Inovar, supporting external companies during bids, tenders, and collaborative security projects. I've also performed source-code reviews and manual Web/API testing for other organizations.

Outside client work, I participate in HackerOne, Bugcrowd, and Bug Bounty SA, reporting verified vulnerabilities to companies including Google and Meta. I'm passionate about building secure-by-design systems and embedding security into DevOps pipelines.