I help organizations build secure software ecosystems through structure and governance.
Riyadh, Saudi Arabia — Application & DevSecOps Security
CEH · ECSA · CND
Certified
5+ Years
Experience
Work with me →
Have a system that needs a second, harder look?
01 — Approach
5+ years in application security — auditing, implementation, and automation across compliance reporting, secure development, and DevSecOps. I focus on embedding security into the SDLC and CI/CD pipeline itself, not bolting it on after, and on delivering measurable results in weeks, not quarters.
02 — Services
See all →DevSecOps
Ensure secure development with integrated security in your SDLC and CI/CD pipelines.
Threat Modeling
Proactively address security risks with tailored threat modeling services.
Secure Code Review
Combine automated and manual code review for thorough analysis of your application.
Integration Security Review
Evaluate and improve the security of integrated systems with a detailed security review.
03 — Selected work
Full history →Elm — DevSecOps Resident Engineer
Oct 2024–PresentPrincipal Application Security Consultant, embedding security across the SDLC and CI/CD for cloud-native & on-prem environments.
Fawry Banking & Payment Technology
Jan 2023–Jan 2024Team Lead, Application Security (FAST) — PCI ASV review, SSDLC planning, mobile/web/network/POS pentesting.
04 — Writing
See all →Writing coming soon.
Work with me
Have a system that needs a second, harder look?