Amr Gomaa

Successfully discovered and reported High and Medium severity vulnerabilities in real-world applications Earned monetary bounties for valid security findings Identified vulnerabilities including Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), Authentication Bypass, Security Misconfigurations

Security Researcher (Bug Bounty Hunter) - YesWeHack (YWH) and Intigriti - Remote

(2024-01)

• Successfully discovered and reported High and Medium severity vulnerabilities in real-world applications
• Earned monetary bounties for valid security findings
• Identified vulnerabilities including Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), Authentication Bypass, Security Misconfigurations
• Developed and used automation scripts with Python, Bash, and Nuclei for reconnaissance
• Performed manual testing using Burp Suite and custom methodologies
• Created detailed vulnerability reports including PoC, impact, and remediation

Security Researcher (Bug Bounty Hunter) - Freelance - Remote

(2023-07)

• Actively hunting vulnerabilities on YesWeHack (YWH) and Intigriti
• Successfully identified and reported High and Medium severity vulnerabilities across multiple targets
• Received monetary bounties for valid submissions
• Discovered vulnerabilities including Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), Authentication Bypass, Misconfigurations
• Wrote professional vulnerability reports including PoC, impact analysis, and remediation steps
• Automated reconnaissance using Python, Bash, and Nuclei
• Performed advanced manual testing using Burp Suite

B.Sc - Computer Science - Kafr El-Sheikh University (2022-10 - 2026-07)

Cybersecurity Summer Training - Cybersecurity - Information Technology Institute (ITI) (2025-07 - 2025-08)