I test applications, APIs, cloud, and identity systems, then explain the attack path and the fix.

I'm Abdullah Kareem. My work combines authorized penetration testing, security engineering, and coordinated vulnerability disclosure.

Current role: Penetration Tester; Since April 2026
Public research: 25 assigned CVEs; Vendor-linked records and case studies
Core credentials: HTB CAPE · OSWE · OSEP · OSCP+ · HTB CPTS · CISSP; Provider-verifiable records

Experience

Offensive security backed by enterprise systems experience.

My background spans infrastructure operations, security engineering, and authorized penetration testing.

Now
Penetration Tester
Security assessment team
Apr 2026 to present
Authorized application, mobile, and adversary-simulation assessments with peer review and remediation-focused reporting.
Recent
Cybersecurity Specialist
Smart Oasis Company
Feb to Apr 2026
Network and identity testing, vulnerability management, monitoring, and security-by-design review.
Foundation
IT & Telecommunications Specialist
United Nations
Dec 2017 to Dec 2025
Enterprise infrastructure, identity modernization, network operations, security response, and staff awareness.

Selected evidence

Public source, methodology, and operating limits accompany each entry.

An LLM-assisted variant-analysis engine that validates and ranks static-analysis matches into a short list of manually-verifiable leads.

A local-first attack-surface workbench for turning common recon output into explainable priorities.

seg-test runs approved checks from defined source VLANs, preserves raw Nmap output, and packages evidence without making compliance decisions.

A reviewed account of a BitLocker-based cryptographic-erase prototype, its operating assumptions, and the validation required before real-world use.

Start a conversation

Email me directly. For assessment or disclosure enquiries, start with high-level context and move sensitive details to an agreed private channel.