Sahnoun Oussama

Conducted more than 24 penetration tests (web, infrastructure, cloud) that led to a 40% reduction of critical vulnerabilities in production. Exploited major vulnerabilities (IDOR, SQLi, XSS, SSRF, RCE) on high-impact financial applications. Delivered 50+ technical and executive reports, accelerating remediation timelines by 25%. Contributed to the development of internal tools and automation, reducing manual efforts by 30%

Validated cybersecurity compliance of avionics systems (A320, A350, A380) according to DO-326A standard. Analyzed more than 15 system change plans and identified compliance gaps. Improved document traceability, reducing the risk of non-compliance by 20%.

Performed penetration tests for banking and governmental clients, identifying over 100 vulnerabilities. Produced remediation recommendations that reduced recurrence of vulnerabilities by 35%. Participated in Red Team exercises, enhancing client SOC detection capabilities.

Performed web and network penetration tests, reporting over 50 exploitable vulnerabilities (SQLi, XSS, CSRF, IDOR). Delivered detailed technical reports and risk-aligned remediation recommendations.