baha eddine gmar

Perform secure code reviews to detect and report security vulnerabilities in source code, following industry best practices (e.g. OWASP TOP 10, secure coding standards). Conduct vulnerability assessment by running internal scans to identify exposed assets and know vulnerabilities across infrastructure and applications. Investigate and analyze scan results, manually validate findings, and reproduce proof-of-concept (PoC) exploits in a controlled environment to confirm impact and eliminate false positives. Apply system and application hardening measures by enforcing secure configurations and reducing attack surfaces. Execute targeted penetration testing tasks to assess the security posture of internal systems and validate defense mechanisms. Act as a point of contact for triaging externally reported security issues and support remediation planning. Contribute to the continuous improvement of internal security processes, documentation, and secure development lifecycle initiatives. Automated Vulnerability Scanning and Reporting using (Python/Bash..).