Elhosainy Osama

• Executed authorized penetration testing research covering full attack chains: reconnaissance, initial access, lateral movement, privilege escalation, and post-exploitation impact assessment
• Researched Active Directory attack paths including GPO abuse, ACL misconfigurations, Kerberoasting, and delegation exploitation across simulated enterprise domain environments.
• Researched and exploited web application vulnerabilities including argument injection, authentication bypass, SSRF, IDOR, and file upload filter evasion using manual techniques and Burp Suite
• Analyzed Linux security mechanisms including AppArmor policies, Sudo misconfigurations, and PAM stacks to identify and exploit privilege escalation paths
• Built custom Python tooling for exploit automation, payload delivery, and reconnaissance to improve engagement efficiency and repeatability
• Produced structured penetration testing reports detailing attack narrative, root cause analysis, business impact, and prioritized remediation

• Conducted infrastructure penetration testing; enumerated opens SMB shares exposing sensitive data and identified credential reuse weaknesses (password reuse, weak 2FA); mapped domain compromise attack chain from SMB enumeration → credential harvesting → lateral movement → Domain Admin compromise.
• Identified endpoint misconfigurations (missing patches, weak application controls) affecting 40%+ of 500+ devices; recognized Windows Defender as primary detection control preventing attack progression.
• Deployed Starlink infrastructure during armed conflict; maintained critical connectivity and zero data loss across 7 locations.
• Delivered security awareness training to 500+ staff on credential hygiene and phishing.

• Identified security weaknesses and misconfigurations across enterprise networks and systems during daily operations, escalating and remediating findings proactively — reducing system exposure and service downtime by 20%.
• Resolved 95% of support tickets within SLA while contributing to infrastructure hardening through vulnerability identification and escalation.
• Conducted system backup and recovery testing, achieving 90% data recovery success rate — validating resilience against data loss scenarios.

• Assessed and hardened identity and endpoint security posture by deploying Microsoft Enterprise Mobility + Security (EMS) across 500+ endpoints.
• Deployed Azure AD, conditional access policies, MFA enforcement, and MDM across 500+ endpoints.
• Diagnosed and remediated access control weaknesses through systematic security analysis and privilege management improvements.
• Achieved 30% reduction in reported security incidents within 4 months.

• Supported network troubleshooting, system maintenance, and IT procurement. Built foundational enterprise infrastructure knowledge applied in later security roles.