Ala Loghmari
Security Consultant | Penetration Tester
Professional Summary
Security Consultant specializing in offensive security and penetration testing, with hands-on client experience across web applications, Active Directory, thick and thin clients, and cloud (Azure, AWS) environments. Holds 14 industry certifications, including HTB CPTS, HTB CWES, CRTP, eCPPTv3, eWPTXv3 and RHCSA. Engineer's degree in Security of Computer Systems and Networks. Delivers clear technical and executive reports that help clients find vulnerabilities, assess risk and strengthen their security posture.
Skills
- Penetration Testing
- Web Application, Active Directory, Network / Infrastructure, Thick and Thin Client, Cloud (Azure, AWS), Mobile
- Offensive Security
- Red Teaming, Privilege Escalation, Lateral Movement, OWASP Top 10, Vulnerability Assessment
- Tools
- Burp Suite, Metasploit, Sliver (C2), Nmap, Wireshark, Splunk, ELK Stack
- Defensive Security
- Digital Forensics and Incident Response, Malware Analysis, Threat Hunting, OSINT
- System Administration
- Linux (RHEL), Windows Server, Active Directory, Group Policy, PKI / AD Certificate Services
- Scripting
- Python, Bash / Shell Scripting
- Reporting
- Technical and executive security reports, risk rating, remediation guidance
Professional Experience
Security Consultant
- Perform penetration tests for clients across web applications, Active Directory, thick and thin clients, and cloud infrastructure (Azure, AWS).
- Identify and exploit vulnerabilities, assess business risk, and recommend practical fixes.
- Write detailed technical and executive reports in French and English, with risk ratings and remediation steps.
- Advise clients on how to strengthen their overall security posture.
System Administration Intern
- Deployed and configured an Active Directory infrastructure, including Organizational Units (OUs) and Group Policies (GPOs).
- Set up a Public Key Infrastructure (PKI) with Active Directory Certificate Services to secure communications and protect data.
Certifications
Certified Penetration Testing Specialist (CPTS)Hack The Box · 2026
Certified Web Exploitation Specialist (CWES)Hack The Box · 2025
Certified Red Team Professional (CRTP)Altered Security · 2025
Certified Red Team Analyst (CRTA)CyberWarFare Labs · 2025
Web App Penetration Tester eXtreme (eWPTXv3)INE Security · 2025
PT1TryHackMe · 2025
Certified Professional Penetration Tester (eCPPTv3)INE Security · 2024
Web App Penetration Tester (eWPTv2)INE Security · 2024
Certified AppSec Practitioner (CAP)The SecOps Group · 2024
Red Hat Certified System Administrator (RHCSA)Red Hat · 2024
Certified Network Security Practitioner (CNSP)The SecOps Group · 2024
Junior Penetration Tester (eJPT)INE Security · 2024
Blue Team Junior Analyst (BTJA)Security Blue Team · 2024
Certified Associate Python Programmer (PCAP)OpenEDG Python Institute · 2024
Education
Engineer's Degree, Security of Computer Systems and Networks
TEK-UP University of Digital Sciences · 2023 - 2026
Pre-Engineering Studies
Faculté des Sciences de Monastir · 2020 - 2022
Languages
Arabic (Native) · French (Professional) · English (Professional)