Metasploit, Cloud Security, Network Security, Web Application Security, Javascript, Php, Python, Java, Sql Injection, PowerShell, Nmap, Bash, Penetration Testing, Kali Linux, Burp Suite, API Security, Nessus, Authentication Bypass, IDOR, Offensive Security, Command Injection, Active Directory Security, Deserialization vulnerabilities, Privilege Escalation

Identity And Access Management, User access reviews, Entitlement certifications, Managing user roles, Access recertification, Identity lifecycle management, Access control assessments, User account administration, Access controls, PAM solutions, Regulatory Requirements, Information security audits, Access provisioning

Control Mapping and Gap Assessments, Security Risk Assessments, Policies Procedures Controls SOA, Egyptian cybersecurity information security regulatory requirements, SOC 2, Ability to map international frameworks to Egyptian requirements, ISO IEC 27001 2022, PCI-DSS, Egyptian data protection and privacy requirements, Internal External Audit Preparation, Information Security Governance Compliance, Risk Management Frameworks, NIST Cybersecurity Framework, NIST SP 800-series

Metasploit, PowerShell, Nmap, Bash, Networking, Windows, Burp Suite, Microsoft 365, Application Security, Linux, Owasp, Penetration Testing, Azure, Python, AWS, red-team activities, offensive security, Impacket, PTES, BloodHound, authentication technologies, infrastructure penetration testing

Iso 27001, risk assessments, GRC frameworks, risk treatment plans, FRA Regulation, SOC 2, PCI-DSS, third-party vendor risk management, security awareness programs, Security Policies, Audit Documentation, Compliance Audits, CIS Controls, phishing simulations

red teaming , Pentesting, cloud security, AI tools, red team narratives, threat modeling methodologies, data labeling platforms, security reports, kill chain frameworks, Security Architecture, Enterprise Environments, blue-team role, MITRE ATT&CK, threat assessments

security plus , Gdpr, Iso 27001, Security Controls, Grc, Cism, internal and external security audits, NIST CSF, CIS Controls, Cisa, security frameworks, SOC 2, TCP IP networks, information security policies, Cissp, IT Security Risk Register, cgeit, CRISC, security risk assessments, NIS2

Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Mobile Application Security Testing (MAST), Software Composition Analysis (SCA), PowerShell, Bash, Penetration Testing, Jenkins, Burp Suite, Web Application Testing, Mobile Application Testing, Python, Azure DevOps, Objection, Tekton, MobSF, CI/CD Integration, OWASP Testing Methodologies, Frida, GraphQL APIs

red teaming , Network Penetration Testing, C, cloud security, PowerShell, Gcp, Linux Internals, Azure, Penetration Testing, Web Application Security, Python, Scripting, AWS, exploitation techniques, post-exploitation lateral movement, Active Directory attack paths, exploit development

Pci Dss, Iso 27001, Information Security, Data Protection, Excel, Data Privacy, Internal Audits, Fraud investigation, Risk Assessments