Penetration Testing
Internal and external infrastructure, network, web and mobile application assessments; Active Directory attack paths, exploitation and privilege escalation.
HANDS-ONAHMED K ALSHAMMARI // J4N4Z4
Offensive Security & VAPT Manager building and leading enterprise security programs — from hands-on penetration testing and adversary simulation to full lifecycle deployment and operation of security platforms.
I bridge hands-on offensive security with enterprise-scale execution.
My experience spans internal and external penetration testing, web and mobile application security, wireless assessments, Active Directory, vulnerability management, social engineering, physical security assessments, and coordinated adversary exercises.
Beyond conducting assessments, I have helped take enterprise security solutions from initial evaluation and technical setup through production go-live, continuous operations, vendor coordination, remediation tracking, and security reporting.
Current role: Offensive Security & VAPT Manager. Professional background and title aligned with my LinkedIn profile.
Internal and external infrastructure, network, web and mobile application assessments; Active Directory attack paths, exploitation and privilege escalation.
HANDS-ONPractical enterprise Wi-Fi penetration testing, wireless attack surface assessment and security control validation.
HANDS-ONExecuted authorized voice-based social engineering and AI-assisted voice impersonation assessments to test identity verification and human security controls.
HANDS-ONConducted authorized physical security assessments, demonstrating gaps in facility access procedures and security guard controls.
HANDS-ONPlanning and execution of red team, purple team and adversary simulation activities, with actionable findings and control improvement.
OPERATIONSVAPT strategy, third-party assessment oversight, risk-based prioritization, remediation governance and executive reporting.
LEADERSHIPReceived corporate recognition for identifying critical vulnerabilities with the potential for major financial, operational and reputational impact. Sensitive details are intentionally withheld.
Successfully conducted authorized physical entry, AI-assisted voice impersonation and telephone-based social engineering assessments across enterprise functions, identifying opportunities to strengthen human and procedural controls.
PUBLIC SECURITY RESEARCH
Public HackerOne acknowledgments include Stanford University, Mount Sinai Health, Expedia Group, MTN Group and other programs. Public recognition does not imply employment or endorsement by these organizations.
Hands-on experience implementing, integrating, operationalizing and managing security assessment technologies across the enterprise lifecycle.
Rapid7 · Tenable Nessus · Horizon3.ai · CyCognito
Checkmarx · Appknox · Invicti
Redpath · Defendis · MicroMinder Cyber Security
Platforms listed represent professional experience, not vendor partnerships or endorsements. Responsibilities and depth of deployment vary by solution.
Awarded for proactive discovery of critical vulnerabilities posing significant potential business risk.
Open to professional conversations about offensive security, security research, enterprise VAPT programs and cybersecurity leadership.