Fadiah Almutairi

Role Overview Drive enterprise-level vulnerability assessment and penetration testing (VAPT) initiatives across web applications, APIs, and network environments. Operate at the intersection of offensive security and risk mitigation to proactively identify, validate, and remediate security weaknesses, strengthening the overall cybersecurity posture of a large-scale government environment. Key Achievements - Identified and validated critical and high-risk vulnerabilities across enterprise systems, enabling proactive remediation before potential exploitation. - Enhanced application and infrastructure security by combining automated scanning with advanced manual penetration testing techniques. - Strengthened secure development practices through in-depth source code security reviews, reducing exposure to exploitable flaws. - Improved remediation efficiency and accountability by establishing structured tracking and validation workflows via ServiceNow (SecOps). - Contributed to elevating the organization’s security maturity and risk awareness through consistent vulnerability management and re-testing cycles. Core Responsibilities - Conduct comprehensive vulnerability assessments using Qualys to identify security gaps across enterprise assets. - Execute manual penetration testing targeting Web Applications, APIs, and Network infrastructures to simulate real-world attack scenarios. - Perform secure code reviews utilizing Black Duck and Coverity to detect vulnerabilities at the source code level. - Manage the full remediation lifecycle, collaborating with cross-functional teams and tracking progress through ServiceNow (SecOps). - Perform re-testing and validation activities to confirm effective remediation and ensure compliance with security standards. - Continuously assess and improve organizational security posture by proactively identifying and mitigating emerging threats.

Role Overview Completed an intensive, hands-on offensive security training program focused on real-world penetration testing methodologies, aligned with the OSCP (PWK) framework. Developed a strong technical foundation in ethical hacking and adversary simulation. Key Achievements - Successfully completed rigorous hands-on labs and practical attack scenarios simulating real-world environments. - Built solid expertise in system exploitation and privilege escalation, aligned with OSCP standards. - Demonstrated strong capability in problem-solving under constrained and realistic penetration testing conditions. Core Responsibilities - Performed end-to-end penetration testing exercises, including enumeration, exploitation, and post-exploitation activities. - Applied OSCP-aligned methodologies to identify and exploit vulnerabilities across multiple systems. - Utilized tools such as Kali Linux and manual techniques to conduct realistic attack simulations. - Developed structured approaches to documentation and reporting of security findings.

- Build strong foundations in core computing principles and problem-solving methodologies. - Develop proficiency in software design, programming, and system development. - Understand computer systems, networks, and data management concepts. - Prepare for advanced careers and continuous learning in technology and cybersecurity fields.

- Build foundational knowledge of computer networking concepts and architectures. - Develop skills in network configuration, administration, and troubleshooting. - Understand network security principles and threat mitigation techniques. - Prepare for industry certifications and entry-level networking roles.