Hazem Brini

- Freelance Security Researcher and Bug Bounty Hunter specializing in offensive security assessments across web, mobile, cloud, API, IoT, and AI ecosystems. - Conducting advanced penetration testing engagements for clients, including black-box, gray-box, and white-box assessments. - Identifying, validating, and exploiting vulnerabilities such as XSS, IDOR, SSRF, RCE, authentication bypass, business logic flaws, and infrastructure weaknesses. - Performing reverse engineering and security analysis of applications, binaries, and custom technologies to uncover complex attack surfaces. - Delivering professional vulnerability reports with actionable remediation guidance and security hardening recommendations. - Supporting organizations in improving their security posture through technical consulting, attack surface analysis, and tailored offensive security services.

- Penetration Testing: web application audits (OWASP), AD/infrastructure testing, exploit writing (XSS, IDOR, SSRF, RCE), Burp plugins, and automation scripts (Python/Bash). - R&D Cursor AI: scoping, benchmarks, use cases for penetration testing (assisted OSINT, attack scenario generation, evidence consolidation), writing an internal report, and demonstrations to management. - Fuzzing & Reverse Engineering: design of targeted fuzzers (image/stream analyzers), crash analysis (ASAN/UBSAN), DLL/binary reversal (Ghidra, WinDbg), and development of non-destructive Proofs of Concept (PoCs). - Project Management: end-to-end planning (kick-off, scope definition, milestones, SLAs), meeting facilitation, preparation of materials, and follow-up through to final delivery.

helped me get this job

helped me get this job

- Collaborated with Knowsec, a Penetration Testing & Vulnerability Assessment and a leading secure development company, as an independent penetration tester. - Conducted comprehensive penetration testing on websites and mobile applications developed by Knowsec for clients, ensuring robust security measures were in place. - Worked closely with a highly skilled and globally recognized penetration testing team at Knowsec to identify vulnerabilities and mitigate potential threats. - Specialized in various penetration testing techniques including Network Infrastructure Testing, Agile Pen Testing, Cloud Penetration Testing, Wireless PenTesting, Social Engineering, and Mobile PenTesting. - Contributed to enhancing the overall security posture of clients' digital assets by providing detailed vulnerability assessment or Penetration Testing reports and recommending effective solutions. - Played a crucial role in reinforcing clients' cybersecurity defenses by uncovering vulnerabilities before they could be exploited by malicious actors. - Provided valuable insights and recommendations to clients through Cybersecurity Guidance services offered in collaboration with Knowsec, assisting them in navigating the complex landscape of cybersecurity. - Demonstrated professionalism, expertise, and commitment to excellence in every project, aligning with Knowsec mission to deliver secure and tailored digital solutions to clients worldwide.

• Ensures the operational availability of the infrastructures and technical resources of the CORPORATE sites. • Operations: Administers the system infrastructures (Server, antivirus etc.), network and security of the Plastic Omnium management perimeter. • Resource Management and Project Support: Participate in the project and set up standards and recommendations for the group and divisions • LEVEL 3 and VIP support: Front Office support and assistance role for users

-Monitoring & SIEM solution configuration -Analysis of security events -Alert processing -Vulnerability analysis -Incident Handling -Implementing Threat Intelligence within SOC