xxhalyl · Application Security Suite v2026.8 · project: gammar-portfolio.burp

GET /experience HTTP/1.1200 OK

Experience

HTTP history5 entries
  1. POST

    Elumia, Remote

    Automation Intern (Graduate Engineering Project)

    Feb 2026 to Jun 2026200 OK
    • Engineered a GDPR-compliant data protection architecture for an AI email platform: a 3-stage PII masking pipeline anonymizing live mailbox content before third-party LLM inference.
    • Orchestrated secure infrastructure on Kubernetes (K3s) with CI/CD automation for workflows, configuration and deployments.
    • Enforced shift-left security with SAST, dependency checking and secret-scanning gates, backed by Prometheus/Loki/Grafana monitoring.
  2. POST

    Kian Technology

    DevSecOps Engineer

    May 2025 to Jan 2026200 OK
    • Embedded SAST, DAST, SCA and secret scanning into pre-release pipelines; consolidated 5 scanners into one DefectDojo dashboard with MS Teams alerts.
    • Ran internal pentests on a multi-tenant platform, uncovering critical tenant isolation flaws (IDOR, JWT) and wired regression checks into the pipeline.
    • Performed secure code review on Python services and drove requirements with OWASP ASVS, backed by STRIDE threat modeling of the platform's trust boundaries.
  3. PUT

    Intellisec Solutions, Remote, Canada

    Cyber Security Consultant

    Feb 2025 to May 2025200 OK
    • Delivered full-scope black-box penetration tests for 15+ clients across web apps and APIs: auth, authorization, injection and business logic flaws.
    • Authored PTES-aligned remediation reports mapping CVSS v3.1 ratings to business impact for non-technical stakeholders.
  4. PATCH

    Kian Technology

    Penetration Tester Intern

    Jul 2024 to Aug 2024200 OK
    • Discovered and published CVE-2025-9094 (client-side template injection) while assessing an IoT platform pre-production.
    • Identified critical infrastructure flaws: cross-tenant data exposure, RBAC bypasses, exposed messaging tokens and a provisioning race condition.
  5. PATCH

    Kian Technology

    DevSecOps Intern

    Jun 2024 to Jul 2024200 OK
    • Deployed Wazuh SIEM across 14 endpoints, establishing baseline security visibility where none existed.
    • Implemented a vulnerability management platform adopted as the engineering team's single source of truth.
© 2026 Mohamed Khalil Gammar
Tab: History21:21:21 UTC