ramy mimouni

 Conducted Network penetration testing for various clients, identifying security vulnerabilities and
recommending solutions showcasing expertise in using tools such as Metasploit for exploitation,
Nmap, and Amass for network discovery, and Wireshark for network traffic analysis.
 Conducted Web-app penetration testing for various clients, identifying security vulnerabilities and
recommending solutions. showcasing expertise in using Burp Suite for web application security
testing, vulnerability assessment scanners as Nessus, openVAS and OWSAP 10 knowledge.
 Experience with manual techniques to reveal vulnerabilities and exploit in webApps, API,
websites, that allows to discover and identified vulnerabilities beyond the scope of what
automatization tools can reveal.
 Creating custom Python scripts to automate repetitive tasks in penetration testing processes, such
as network scanning and log file analysis. this increased operational efficiency.
 Helping clients to create robust security standards, and guidelines with threat management
leading to improvement in report accuracy and a significant boost in team collaboration and skills
enhancement.
 Providing Incident response planning to clients by preparing a security threat model and
associated test plans.
 Providing investigating and forensics services as malware analysis and reverse engineering, traffic
analyses using wireshark, log investigation using splunk or ELK.
 Providing expertise on defending endpoints and servers (IDS, IPS, Endpoint Security Measures,
Anti-Malware, Anti-Virus and Remote Access Controls.).
 Active participant in bug bounty programs, securing over 100 successful findings through
platforms like HackerOne, Bugcrowd, and Private programs.
 Selling and installing Network equipment, assuring availability, reliability and security.
 Developed a comprehensive school management program for Beloba School, showcasing full-
stack development skills:
• Designed and implemented front-end UI, back-end server, and database
• Created an automated attendance system using QR code scanning
• Ensured secure data handling and user authentication throughout the application

• Configured and routed WAN networks for 9 sites, ensuring seamless connectivity and security.
• Installed and configured Fortigate firewalls, enhancing network security across multiple locations.

• gained hands-on experience in incident response and the practical application of cyber security
principles.
• Progressed from Tier 1 Incident Handler to Tier 2 Technical Action Coordinator within 6 months.
• Detected and mitigated multiple security vulnerabilities, with a focus on web application security issues.
• wrote and maintained documentations, and reports.

• Assisted in SOC operations and gained hands-on experience in security monitoring and incident response.
• Researched and recommended the most suitable open-source Security Information and Event Management (SIEM) solution for the SOC project.
• Manged the daily tasks of IT department, including troubleshooting and maintenance for hardware, software, and network.
• provided support and assistance to end-users addressing hardware, software, and network issues.
• Ensured the availability, reliability, and security of the network, and software applications.