عبد الرحمن الحمود

Cybersecurity Engineer with hands-on experience in both defensive (SOC, monitoring, SIEM) and offensive security (web application testing and vulnerability research). Skilled in identifying real-world vulnerabilities including DOM-based XSS, IDOR, and SSRF through manual testing and analysis of modern web applications. Strong foundation in network security, traffic analysis, and security frameworks, with practical experience using tools such as Burp Suite, Wireshark, and Nessus.

Passionate about offensive security, bug bounty hunting, and continuously improving practical exploitation skills. Hands-on experience in real-world bug bounty programs (YesWeHack) with successful vulnerability reporting.

Trainee cybersecurity engineer at iAlmas Technology Company (2026-05 – Present)

• Defensive Security: Applied Data Loss Prevention (DLP) strategies using Zecurion and managed Endpoint Detection and Response (EDR/XDR) systems to prevent ransomware and data breaches.
• Network Security: Configured network firewalls (Fortinet) and implemented email authentication protocols (SPF, DKIM, DMARC) to combat phishing and spoofing attacks.
• Cloud & Virtualization: Managed virtual environments using VMware and Hyper-V, and deployed cloud infrastructure on Google Public Cloud (GPC), including VMs and Load Balancers.
• Offensive Security: Conducted automated security assessments and continuous testing to identify vulnerabilities.

Cybersecurity Researcher (Bug Bounty) at YesWeHack Platform (2026-01 – 2026-05)

• Identified and documented complex technical vulnerabilities (such as XSS, IDOR, and SSRF) in global web applications, demonstrating advanced analytical and logical reasoning skills.
• Developed comprehensive technical reports and Proof-of-Concept (PoC) documentation, translating technical findings into clear, structured, and actionable information.
• Invited to exclusive private security programs based on the high quality and accuracy of submitted vulnerability reports.
• Utilized advanced problem-solving methodologies to analyze system architectures and identify logical flaws, a skill set directly transferable to advanced mathematical and IT instruction.

Bachelor's Degree in Computer Systems and Networks Security Engineering – Syrian Private University-SPU (2021-10 – 2026-02)