Resume

Contact Information

#

Email: moh_amgad@hotmail.com

Connect:

Experience

#

R&D Tech Lead | Cyshield

#

Present | Cairo, Egypt

I lead the technical side of security R&D at Cyshield and own the security architecture across what we build: AI-native security products and the model infrastructure they run on.

• Application security platform that scans on the customer’s own machine and sends only finding metadata to the cloud, so their source never leaves their environment.
• Agentic SOC systems, now in daily use by our analyst teams, where agents carry the investigation legwork and every action lands in a trail an analyst can review.
• Commercially launched AI-powered WAF, where I ran the threat modeling and secure design through to launch. It sits inline on all customer traffic, which makes its own security a first-order concern.
• AI hosting: deploying and tuning open-weight models on vLLM and llama.cpp behind OpenAI-compatible gateways, with the harnesses and provider shims that let one security core run against a local or a hosted model.
• Evaluation and benchmarking against labeled corpora with deterministic graders, which showed a security-tuned prompt on a locally served model recovering more real vulnerabilities than a frontier agent did, including every critical one.
• Cost measured alongside recall rather than after the fact: get the system working, prove it finds what it claims, then bring down what it costs to run.
• Agentic systems on both sides of an engagement, offensive tooling that runs under a hard scope gate and defensive systems that investigate and verify.

Senior Security Engineer | Unifonic

#

Jun 2024 – Jun 2025 | Cairo, Egypt

Led enterprise-wide security engineering at Unifonic, most of it on the DevSecOps side.

• DevSecOps pipelines putting SAST, DAST and SCA in front of every engineering team.
• Cloud-native security controls architected and deployed across AWS and Kubernetes environments.
• Architecture reviews and threat modeling for the systems the business could least afford to lose.

Senior Cyber Security Engineer | Cyshield

#

Jan 2020 – Jun 2024 | Cairo, Egypt

Four years of security consulting and offensive assessment for enterprise clients in banking, telecom and fintech, finding by hand the vulnerabilities I now build tooling to scan for.

• Web application and network penetration tests run end to end, from scoping and recon through exploitation and client-facing reporting, alongside mobile assessments.
• Manual secure code review as a core service line, and the direct precursor to the rule-writing I do now.
• Remediation advice developers would actually ship, rather than a PDF of severities.
• Mentoring that raised assessment quality across the team.

Security Engineer | Shieldfy

#

Jan 2018 – Oct 2018 | Alexandria, Egypt

My first security engineering role, on Shieldfy’s RASP product.

• Researched attack patterns and turned them into runtime protection signatures.
• Ran web and mobile application assessments against the protections I had just written.

Projects

#

DVBLab - Secure Banking Application Training Project

#

Security Developer & Course Author

GitHub: https://github.com/mamgad/DVBLab/

• Developed a comprehensive banking application with intentionally embedded security vulnerabilities for educational purposes
• Created course modules covering secure code review, authentication vulnerabilities, SQL injection prevention, and API security
• Implemented real-world security scenarios including race conditions, JWT vulnerabilities, and authorization bypass exploits
• Integrated industry security standards including OWASP, PCI DSS, FFIEC, and NIST frameworks

Skills

#

Software Development

#

Primary Focus: Secure software development across multiple languages and frameworks, with emphasis on building secure and scalable applications.

Application Security

#

Specialization: Implementing comprehensive security solutions across the software development lifecycle, from design to deployment.

Cloud & Infrastructure

#

Experience: Securing cloud-native applications and implementing DevSecOps practices in modern infrastructure environments.

Certifications

#

Advanced Security Certifications

#

Penetration Testing Certifications

#

Achievements

#

Awards & Competitions

#

• ADDA Finals CTF - 3rd Place, 2022
• EG-CERT National CTF - 1st Place, 2019
• Arab Cyber Wargames Championship - 4th Place, 2018
• CyberTalents Finals CTF - 5th Place, 2017

CVEs

#

• CVE-2026-108481 - Cross-Site Request Forgery (CSRF) in Patreon WordPress plugin (≤ 1.10.0)
• CVE-2026-104803 - Unauthenticated Authentication Bypass in WPCOM Member plugin for WordPress (≤ 1.7.27)
• CVE-2026-105059 - Broken Access Control in Delete All Comments of WordPress plugin (≤ 7.1)
• CVE-2026-93620 - Broken Access Control in PayPlus Payment Gateway plugin for WordPress (≤ 8.2.5)
• CVE-2017-1000058 - Stored XSS at Chevereto CMS
• CVE-2018-5222 - Pending Disclosure

Research Highlights

#