Cybersecurity Analyst & Penetration Tester
Computer Science Student at KFU |
Passionate about cybersecurity, penetration testing, Network Enginering , and AI
About Me
I am a dedicated Computer Science student at King Faisal University with a strong focus on cybersecurity.
With a GPA of 4.57/5.00, I have demonstrated academic excellence while actively engaging in practical cybersecurity work through internships, leadership roles, and hands-on projects.
My expertise spans across penetration testing, digital forensics, incident response, and network security. Ranked in the Top 2% globally on TryHackMe and Top 3.5% globally on PortSwigger Academy, I have developed strong hands-on skills through practical labs, CTF challenges, Active Directory environments, web application security testing, and real-world attack simulations.
As the founder of Tuwaiq Club at King Faisal University (2025-2026), I'm committed to fostering cybersecurity talent and creating opportunities for students to develop practical skills in the field.
Experience
Team Leader
CyberTX Academy
Riyadh, Saudi Arabia
Led team operations, coordinated cybersecurity training and projects, managed deliverables, and contributed to the academy’s strategic growth and development.
Network Engineering Intern
ZAIN KSA
Riyadh, Saudi Arabia
Gaining hands-on experience in network engineering within Zain KSA's Data Center, developing practical skills aligned with CCNA and CCNP concepts, including routing, switching, network configuration, troubleshooting, network monitoring, and network infrastructure management. Working with enterprise data center networking technologies and applying networking knowledge to support reliable and secure network operations.
Cyber Security Analyst Intern
Yuvo
Riyadh, Saudi Arabia
Working within a cybersecurity operations environment, supporting security monitoring, threat detection, vulnerability assessment, and security analysis activities. Gaining hands-on experience with enterprise security tools, incident investigation, and security operations best practices.
Burp Champion
PortSwigger
Remote
Member of the PortSwigger community focused on Application Security and Web Security education. Contribute through cybersecurity content creation, community engagement, workshops, and knowledge sharing related to Burp Suite, web application testing, and secure development practices.
Chief Technology Officer (CTO)
PreHack
Remote, Saudi Arabia
Leading PreHack’s technology vision and cybersecurity education strategy, shaping the academy’s technical direction, learning infrastructure, and hands-on training ecosystem. Driving the development of practical cybersecurity programs, CTFs, and real-world security experiences that bridge the gap between learning and industry.
Cyber Security Analyst Intern
Shabakkat KSA (Member of IPT PowerTech Group)
Riyadh, Saudi Arabia
Working within a cybersecurity operations environment, supporting security monitoring, threat detection, vulnerability assessment, and security analysis activities. Gaining hands-on experience with enterprise security tools, incident investigation, and security operations best practices.
Founder & President
Tuwaiq Club - King Faisal University
Hofuf, Saudi Arabia
Founded and currently lead the Tuwaiq Club at King Faisal University, a student-led initiative focused on cybersecurity education and skill development. Organize workshops, CTF competitions, and networking events to bridge the gap between academic learning and industry requirements.
Cybersecurity Club Leader
King Faisal University
Hofuf, Saudi Arabia
Led the university's official cybersecurity club, organizing workshops, hands-on labs, and technical talks. Designed and delivered courses on Cybersecurity Fundamentals, Ethical Hacking, while mentoring members in red and blue team activities and encouraging participation in national and international CTF competitions.
Cybersecurity Committee Member
Saudi Developer Community (SDC)
Remote, Saudi Arabia
Promoted cybersecurity best practices, including virus and malware protection, while designing and leading workshops attended by over 80 students. Collaborated with national tech communities to raise awareness of emerging cyber threats and effective defense strategies.
Cybersecurity Trainer
Newtek
Remote, Saudi Arabia
Cybersecurity training covering ethical hacking, web vulnerabilities (SQLi, XSS, IDOR, XXE), and penetration testing techniques using tools like Nmap, Burp Suite, and Metasploit. Guided students through real-world labs and a final project to analyze and report on system vulnerabilities.
Cybersecurity Intern
Redynox
Remote, Saudi Arabia
Conducted network security tasks including firewall setup and traffic analysis with Wireshark. Performed web application vulnerability assessments using OWASP ZAP and WebGoat, identifying issues like SQL Injection and XSS. Documented findings and recommended mitigation strategies to improve security posture.
Cybersecurity Intern
STC
Remote, Saudi Arabia
The tasks included analyzing network traffic to detect suspicious activity, identifying email security threats like phishing, and implementing incident response measures to prevent further breaches.
Projects
AI-powered vulnerability research assistant built using Groq AI. Enables high-speed searches across Metasploit, Exploit-DB, and SSTI payload databases with real-time vulnerability analysis, CVE intelligence, service version assessments, and direct links to exploit code repositories.
A cybersecurity-focused operating system built for hands-on learning and practical training. Features a labs library with 20+ hands-on cybersecurity labs (including multi-machine networked environments), an AI-powered assistant for learner guidance, and a centralized course notes & learning library. Currently in beta testing and preparing for public release.
Python-based wireless and network security testing framework with a centralized browser dashboard. Combines Wi-Fi discovery, local network scanning, and vulnerability assessment with real-time monitoring for authorized testing and educational labs.
Automated vulnerability discovery using Nmap for service detection and SearchSploit for exploit lookups; supports multiple scan modes, parses service/version data, and generates TXT/PDF vulnerability reports.
Python Tkinter GUI for password entropy analysis and dictionary-based cracking of MD5, SHA-1, and SHA-2 hashes; includes weak password checks and exportable logs.
Multithreaded TCP scanner with banner grabbing, OS detection (TTL-based), and built-in penetration testing guidance; produces detailed assessment reports.
Offline-first AES-256-CBC encrypted note-taking application with salted master password protection, local SQLite storage, and open-source design.
Certifications & Courses
eJPTv2
INE Security
ISO/IEC 27001 Lead Auditor
Mastermind Assurance
CCNA 201-300
CISCO
CEH
EC-Council
Cybersecurity Certificate
Practical Ethical Hacker
TCM Security
SOC 101
TCM Security
Security+
CompTIA
OSCP
OffSec
eWPTx
INE
eCPPT
INE Security
PT 1
TryHackMe
CRTA
CWL
eCTHP
INE Security
eCDFP
INE Security
Skills & Expertise
Technical Skills
Programming Languages
Tools & Platforms
Security Areas
Get In Touch
Contact Information
M8a8a8y@gmail.com
Location
Saudi Arabia