Omar Elnaggar

In my Sentinel & MedVault Labs assessments, I followed a six-phase methodology to test enterprise FinTech and healthcare RAG systems. I scanned AI service ports, checked vector database authentication, and fuzzed FastAPI schemas.

I identified Broken Object Level Authorization (BOLA) in Burp Repeater while testing client-supplied JSON parameters. My work spans RAG pipeline auditing, prompt injection, and vector and embedding weaknesses.

I use Python to create security tooling and work with Qdrant, ChromaDB, Milvus, and Weaviate. My testing also covers web and API exploitation, network reconnaissance, and Linux privilege escalation.

I'm a third-year Computer Science undergraduate with an eJPTv2 certification and specialized training in AI security and red teaming. I’m available for part-time and flexible full-time remote engineering roles across US, EU, and MENA time zones.