Mohamed Ashad

- Integrated a DevOps approach using Jenkins, GitLab, Sentry, Grafana. - Developed and integrated DevSecOps pipelines, incorporating security testing into the SDLC using tools such as SonarQube, Aqua Trivy, Secret Scanning, and Dependency Check. - Developed a vulnerability management platform, DefectDojo, to centralize all reports and findings generated from security scans during DevSecOps pipelines. - Created a vulnerability management dashboard to allow managers and team leads to track vulnerabilities found in the SDLC, monitor their status, and access detailed information about each vulnerability. - Gained practical experience with DevOps and security tools: 1 - Automated build and deployment processes using Jenkins and GitLab CI/CD. 2 - Monitored application performance and security events with Grafana. 3 - Conducted static and dynamic code analysis using SonarQube. 4 - Performed container security scans with Aqua Trivy. Implemented secret scanning to detect sensitive data exposures. 5 - Checked for vulnerable dependencies with Dependency Check. - Collaborated closely with development and operations teams to ensure seamless integration of security practices into the SDLC.

- Conducted Multiple penetration testing on BMCE (BANK OF AFRICA) networks. - Multiple vulnerability assessments for BMCE (BANK OF AFRICA) services. - Assisted in writing comprehensive reports detailing findings, risks, and recommended remediation steps. - Direct contact with clients, helped them remediate and fix findings. - Gained practical experience with Frameworks and tools: - Performed various scans type on clients assets using Nmap. - Performed vulnerability assessments using Nessus. - Exploited various vulnerabilities using Metasploit. - Pentested various web applications using BurpSuite - Collaborated closely with senior consultants to apply Linux/Windows hardening.

It’s my passion for security and curiosity toward technology that brought me to 1337. It's a good place to learn self-taught and discipline to achieve greatness. In the past years in 1337, I Developed teamwork and leadership capabilities through diverse projects, while advancing programming and problem-solving abilities. Pursuing a senior information security program at 1337, honing self-taught skills and discipline for excellence.