Youssef Hussien

I’m a Penetration Tester with 1.5+ years of experience across web, API, mobile (Android & iOS), and network assessments, including Active Directory exploitation and AI/LLM security. I focus on discovering and validating real vulnerabilities in production-like environments—often inside firewalled settings—then documenting results in a way clients and teams can act on.

I’ve delivered professional, client-ready reports for every engagement, covering findings, risk ratings, proof-of-concept, and remediation guidance. In my Classera internship, I performed black-box assessments across multiple products and discovered 6 critical/high vulnerabilities across issues like insecure privileges, injection, and insecure configuration. In ZeroSploit, I assessed 10+ web applications and contributed to identifying and exploiting 15+ vulnerabilities while also building hands-on strength in network scanning, privilege escalation, and Active Directory attacks.

I’m also an active competitive CTF player—ranked in the Top 10 regionally (Arab Security Wargames, ICMTC). Recent highlights include 2nd place at Cyshield Mythical Beast CTF by chaining SQLi/SSRF/XXE to enumerate and escalate through Active Directory, plus 2nd place at CAT Reloaded by excelling in Web and Android challenges. I bring the same drive and structured thinking into professional red-team-style testing.

Beyond assessments, I’m currently building an AI Agent Security Tester graduation project in Python and LLMs to detect Prompt Injection vulnerabilities and insecure MCP implementations, including guardrail testing against jailbreaking and adversarial attacks. I’ve also engineered an automated network vulnerability scanner that reduced manual reconnaissance time by 40%. With certifications and specialized training (OSCP, eWPTXv3, CRTA, and CNSP & CAP), I’m ready to contribute immediately to full-time remote or contract security work.