Mohamed Amgad Khater

Senior Security Engineer | Unifonic

Jun 2024 – Present | Cairo, Egypt

Led implementation of enterprise-wide DevSecOps pipelines, integrating SAST, DAST, and SCA tools
Architected and deployed cloud-native security solutions for AWS and Kubernetes environments
Conducted architecture reviews and threat modeling sessions for critical systems

Senior Cyber Security Engineer | Cyshield

Jan 2020 – Jun 2024 | Cairo, Egypt

Led comprehensive security assessments including web, mobile, and network penetration testing
Mentored team members and enhanced overall security assessment quality

Security Engineer | Shieldfy

Jan 2018 – Oct 2018 | Alexandria, Egypt

Conducted security research and developed detection rules to enhance Shieldfy's RASP (Runtime Application Self-Protection) solution
Performed comprehensive web and mobile application security assessments to validate protection mechanisms and identify security gaps

DVBLab - Secure Banking Application Training Project

Security Developer & Course Author

Tech Stack: Python, Flask, SQLAlchemy, React, JWT Authentication

View Project on GitHub

Developed a comprehensive banking application with intentionally embedded security vulnerabilities for educational purposes
Created course modules covering secure code review, authentication vulnerabilities, SQL injection prevention, and API security
Implemented real-world security scenarios including race conditions, JWT vulnerabilities, and authorization bypass exploits
Integrated industry security standards including OWASP, PCI DSS, FFIEC, and NIST frameworks

Software Development

Extensive experience in secure software development across multiple languages and frameworks, with a focus on building secure and scalable applications.

Primary Languages

Python - Primary language for security tooling

Java - Enterprise application development

JavaScript - Web application development

Additional Technologies

Ruby on Rails - Web frameworks

MySQL - Database management

Bash - Automation scripting

Application Security

Specialized in implementing comprehensive security solutions across the software development lifecycle, from design to deployment.

Security Testing

SAST - Static code analysis

DAST - Dynamic application testing

Penetration Testing - Security assessments

Security Tools

BurpSuite - Web security testing

Metasploit - Exploitation framework

SCA - Dependency analysis

Cloud & Infrastructure

Experience in securing cloud-native applications and implementing DevSecOps practices in modern infrastructure environments.

Cloud Security

AWS - Cloud security architecture

Kubernetes - Container orchestration

Docker - Container security

DevSecOps

CI/CD - Pipeline security

IaC - Infrastructure as Code

DevSecOps - Security automation

Advanced Security Certifications

Offensive Security Web Expert (OSWE)

Advanced certification demonstrating expertise in white box web application assessment and security. Validates ability to review source code, identify vulnerabilities, and exploit them creatively.

Offensive Security Verify

Certified Cloud Native Security Expert (CCNSE)

Advanced certification validating expertise in implementing and managing Cloud Native Security programs, including securing microservices, APIs, containers, and orchestrators.

Practical DevSecOps Verify

Certified Container Security Expert (CCSE)

Advanced certification validating expertise in container security, including assessment, vulnerability management, and security monitoring in production environments.

Practical DevSecOps Verify

Certified DevSecOps Professional (CDP)

Professional certification validating expertise in implementing DevSecOps programs, including security automation, vulnerability management, and secure SDLC implementation.

Practical DevSecOps Verify