Bashar Alshakhanbeh

About Bashar Alshakhanbeh

Web Application Penetration Tester | Red Team SpecialistExperienced in penetration testing with a strong focus on web application security and red team engagements. I specialize in identifying vulnerabilities and providing effective security solutions to protect organizations from cyber threats. With 5 years of hands-on experience, I have successfully conducted numerous web application penetration tests and red team exercises for clients across diverse industries.Proficient in performing comprehensive web application penetration testing, employing both manual and automated techniques to identify security weaknesses, vulnerabilities, and misconfigurations.Skilled in utilizing industry-standard tools and frameworks, including Burp Suite, OWASP ZAP, Nmap, Metasploit, and custom scripts, to assess application security posture and simulate real-world attack scenarios.Demonstrated expertise in uncovering critical vulnerabilities, such as SQL injection, cross-site scripting (XSS), authentication bypass, and insecure direct object references (IDOR), among others.Extensive experience in conducting thorough source code reviews, assessing application logic, and identifying security flaws early in the development lifecycle.Proven ability to effectively communicate findings to clients through detailed vulnerability assessment reports, including risk prioritization, impact analysis, and actionable recommendations for remediation.Well-versed in red teaming methodologies, simulating sophisticated attack scenarios, and emulating adversarial tactics to assess overall organizational security posture.Strong commitment to continuous learning and staying updated with the latest web application security trends, emerging vulnerabilities, and industry best practices.If you are seeking a dedicated web application penetration tester or red team specialist with a passion for securing digital assets, let\'s connect!

Experience

1. Offensive Security Engineer

   EOG Resources

   Sep 2023 — Present · Houston, TX, US

   Penetration Testing: Conducting authorized simulated attacks on computer systems to identify security weaknesses.Vulnerability Assessment: Identifying, quantifying, and prioritizing vulnerabilities in a system.Black Box Testing: Conducting security testing without prior knowledge of the internal workings of the application.White Box Testing: Performing security testing with full knowledge of the application\'s internal structures and logic.Security Audits: Performing regular audits to ensure compliance with security policies and standards.Red Team Exercises: Simulating real-world attacks to test the effectiveness of an organization\'s defenses.Threat Modeling: Analyzing potential threats and developing strategies to mitigate them.Exploit Development: Building and developing exploits to test the security of applications and systems.Reverse Engineering: Analyzing software to understand its structure, functionality, and behavior, often to identify vulnerabilities or understand malware.

Education

• Houston City College

  Certifications, Cyber Security

• Mutah University

  Bachelor's degree, Computer Science

  2015 — 2020