Looks like you have JavaScript disabled. For the full Twine experience, you will need to re-enable it.

I am a Computer and Communications Engineering graduate with a specialization in cybersecurity and software development. My passion lies in identifying vulnerabilities and securing applications while exploring innovative technologies to enhance system performance.…

Jad Ghamloush

Full Stack Developer, Web Developer, Front-End Developer, +3





I am a Computer and Communications Engineering graduate with a specialization in cybersecurity and software development. My passion lies in identifying vulnerabilities and securing applications while exploring innovative technologies to enhance system performance.…

Available to hire

I am a Computer and Communications Engineering graduate with a specialization in cybersecurity and software development. My passion lies in identifying vulnerabilities and securing applications while exploring innovative technologies to enhance system performance.

Skills

Experience Level

Expert

Expert

Expert

Expert

Expert

Intermediate

Intermediate

Intermediate

Intermediate

Intermediate

Intermediate

Intermediate

Intermediate

Intermediate

Language

English

Fluent

Work Experience

Penetration Tester Intern at Potech Consulting

June 1, 2024 - June 1, 2024

Identified and reported security vulnerabilities in web applications through hands-on testing and analysis using tools such as Burp Suite. Performed reconnaissance, vulnerability assessments, and exploitation of common flaws including XSS and SQL injection.

Penetration Tester Intern at Potech Consulting

July 1, 2025 - July 1, 2025

Developed an Automated Secret Detection & Takedown System to identify and mitigate credential and sensitive data leaks across GitHub, Bitbucket, and Postman. Integrated tools (Trufflehog, Gitleaks, detect-secrets) and custom regex for pattern-based scanning. Automated takedown/reporting workflows using platform APIs; implemented logging, dashboards, and ensured compliance with legal and responsible disclosure practices.

Bug Bounty Hunter at Independent

June 1, 2025 - November 2, 2025

Reported valid vulnerabilities across multiple platforms (HackerOne, Bugcrowd) impacting real-world companies including NASA, DELL etc. Specialize in web application security, focusing on practical exploitation techniques.

Technology Risk Consultant – Graduate Program at Ernst & Young (EY)

January 1, 2026 - Present

Conduct IT risk assessments for enterprise systems and review IT General Controls across areas such as access management, change management, and IT operations.

Bug Bounty Hunter at Freelance

June 1, 2025 - Present

Discovered CVE-2026-21641 and reported multiple vulnerabilities via HackerOne and Bugcrowd. Specialized in web application security and ranked in the top 8% worldwide on TryHackMe.