$ whoami
mustafa-ali
$ cat /etc/profile.d/identity.shname: Mustafa Ali
role:
- CTO @ AL-Jedar Group
- Co-Founder @ EMLAK
- CTO @ Al-Shuaa Security Services
certifications: [OSCP+, OSEE, OSWE, CEH v12, CAIP, CAPIE]
platforms: [HackerOne, Bugcrowd]
background: [Apple, Meta, Control Risks, Coop]
focus:
- Offensive Security & Red Teaming
- Enterprise Software Architecture
- AI-Driven Security Solutions
- ATM & API Security Assessments
location: Baghdad, Iraq 🇮🇶Most security leaders think like defenders. I spent years thinking like an attacker — then built systems that stop them.
I hold three of OffSec's most demanding certifications simultaneously — OSCP+, OSEE, and OSWE — a combination held by fewer than a few hundred professionals globally. Before moving into the C-suite, I protected diplomatic missions at the Spanish & German Embassies under Control Risks, contributed to Deep Learning research at Meta, and shipped software at Apple.
Today I build companies and break systems — both on purpose.
| Domain | Expertise |
|---|---|
| 🌐 Web Application Pentesting | OSWE-certified — source code review, auth bypass, RCE chains |
| 💻 Windows Exploitation | OSEE-certified — kernel exploits, advanced shellcoding, DEP/ASLR bypass |
| 🔑 Network Pentesting | OSCP+-certified — full kill-chain engagements |
| 💳 ATM Security | Physical & logical ATM penetration testing |
| 🔌 API Security | CAPIE-certified — REST/GraphQL attack surfaces |
| 🐛 Bug Bounty | HackerOne & Bugcrowd — 6+ years, critical CVEs |
| Project | Stack | Role |
|---|---|---|
| EMLAK — Property Management Platform | Laravel 11 · Filament v3 · MariaDB · Redis | Co-Founder & Architect |
| AL-Jedar ERP — HR · Attendance · Payroll | Laravel · PWA · Push Notifications | CTO |
| Sec2Tech — Cybersecurity Education | Custom LMS | Founder |
| Al-Shuaa Security Tech — Guard Management | Laravel · Real-time Systems | CTO |
Languages & Frameworks
Infrastructure & Security
Database & Caching
AI & Dev Tools
🔴 Offensive Security (OffSec) — Click to expand
| Cert | Issuer | Year |
|---|---|---|
| OSCP+ — Offensive Security Certified Professional Plus | OffSec | 2025 |
| OSEE — Offensive Security Exploitation Expert | OffSec | 2021 |
| OSWE — Offensive Security Web Expert | OffSec | 2020 |
| OSCP — Offensive Security Certified Professional | OffSec | 2019 |
🛡️ Security & Ethical Hacking
| Cert | Issuer | Year |
|---|---|---|
| CEH v12 — Certified Ethical Hacker | EC-Council | 2023 |
| CAPIE — Certified API Hacking Expert | Udemy | 2026 |
| ATM Penetration Testing & Security Assessment | Red Team Leaders | 2026 |
| Red Teaming Certificate | TryHackMe | 2026 |
| CCEP — Certified Cybersecurity Educator Professional | Red Team Leaders | 2025 |
🤖 AI & Engineering
| Cert | Issuer | Year |
|---|---|---|
| CAIP — Certified Artificial Intelligence Professional | GST Inc. | 2020 |
| AI+ Prompt Engineer Level 1™ | AI CERTs® | 2025 |
| Google Cloud Professional API Engineer | 2019 | |
| PCPP2 — Certified Professional in Python Programming | OpenEDG | 2017 |
| Microsoft Certified: Python Developer | Microsoft | 2016 |
| Full-Stack Web Developer | CareerFoundry | 2018 |
"The most effective security leaders think like attackers. I've spent years proving that in the field."