Loay Morad

Junior Penetration Tester and Bug Bounty Hunter with over one year of experience across web and Android application security. Recognized in Google's Honorable Mentions for valid security findings. Specializing in web and Android application exploitation. Proficient in OWASP Top 10 (Web and Mobile), dynamic analysis, and Smali-level reverse engineering.

Bug Bounty Hunter at Self-Employed (2025-01 – Present)

Identified and reported valid vulnerabilities across public and private programs on HackerOne, Google, and GitLab, spanning OWASP Top 10 web and mobile vulnerability classes.

• Identified and reported valid vulnerabilities across public and private programs on HackerOne, Google, and GitLab, spanning OWASP Top 10 web and mobile vulnerability classes.
• Recognized in Google's Honorable Mentions for reporting confirmed security issues in Google's production infrastructure.
• Delivered detailed reports including reproduction steps, impact analysis, CVSSv3 scoring, and mitigation recommendations – consistently praised for report quality.

Bachelor of Computer Science in Computer Science – Ain Shams University (2024-01 – 2027-12)