Zero To Hero Verified Profile
Hamza AL-Smadi
pentester
Professional Summary
Web Application Penetration Testing
Network Scanning & Enumeration
Vulnerability Assessment
Exploitation Techniques
Privilege Escalation
Password Cracking & Authentication Attacks
Red Team Fundamentals
Malware Analysis Basics
Linux Administration & Security
Python & Bash Scripting
API Security Testing
Wireless Security Testing
Reporting & Documentation
Capture The Flag (CTF) Challenges
Threat Analysis & Reconnaissance
Junior penetration tester and cybersecurity professional based in Amman with hands-on experience in web application testing, vulnerability assessment, and offensive security methodologies. Skilled in using industry-standard tools such as Burp Suite, Nmap, and Metasploit Framework to identify and analyze security weaknesses. Experienced with Linux environments, scripting, CTF challenges, and TryHackMe labs. Passionate about ethical hacking, continuous learning, and helping organizations improve their security posture through practical offensive security techniques.
Skills & Capabilities
Core Skills
Tools & Platforms
Languages
Certificates
- Penetration Testing Internship — Green Circle (USAID Program), 2026
- Penetration Testing Internship — Green Circle (GIG Program), 2025
- CCT Fast Track Cybersecurity — Green Circle, 2025
- Pre Security Learning Path — TryHackMe, 2026
- Advent of Cyber — TryHackMe, 2025
- Love at First Breach CTF — TryHackMe, 2026
- Introduction to Packet Tracer — Cisco, 2024
- Cyber Warriors CTF Training — NCSC Jordan, 2023–2024
- CTF Training — Google Developer Students, 2023
- Cloud Computing & IoT — Orange, 2024
- Java Programming (Zero to Hero) — HTUx, 2025
Projects
- IoT Vulnerability Assessment Tool
- Internal Vulnerability Scanner
- Machine CTF
MyCV Experience
- IoT Vulnerability Assessment Tool
- Internal Vulnerability Scanner
- Machine CTF
MyCV Education
- BSc Cybersecurity
About Me
Motivated and detail-oriented cybersecurity fresh graduate with practical experience in penetration testing, red teaming methodologies, and malware analysis concepts. Proficient in web application testing using Burp Suite, network security fundamentals, Python scripting, and Linux-based environments. Demonstrated ability to apply theoretical knowledge through TryHackMe rooms, CTF competitions, and academic projects. A persistent problem solver with a hacker's curiosity and a passion for breaking down complex systems. Seeking a full-time penetration testing role to contribute to offensive security operations.
Education
B
Bachelor's Degree, Cybersecurity, Irbid, Jordan, 2021 — 2025
Yarmouk University - (2021 - 2026)
Focus areas: Network Security, Ethical Hacking, Encryption, Vulnerability Detection, Information Security and programming.
Experience
P
Penetration Testing
Green Circle - (2025 - 2025)
Specialized training in information security and network security. Analysis of threats, vulnerabilities, and exploitation methods. Implementation of administrative, physical, and technical security controls. Using network security assessment and monitoring tools. Fundamentals of encryption and data security. Incident response and digital forensics. Hands-on experience through realistic labs and simulations. Conducted vulnerability assessments and penetration tests on simulated networks. Used Burp Suite, Nmap, and Kali Linux to identify and analyze security flaws. Assisted in reporting and providing recommendations for system hardening. Supported the cybersecurity team in analyzing threats and improving incident response.
P
Penetration Testing (USAID)
Green Circle - (2025 - 2026)
Conducted penetration testing and vulnerability assessments on simulated network infrastructures. Identified and analyzed security vulnerabilities using Nmap, Burp Suite, Kali Linux, and related tools. Assisted in threat modeling and evaluation of attack surfaces to enhance defensive strategies. Documented findings in structured security reports, providing actionable remediation recommendations. Collaborated with the security team to improve incident detection and response workflows.
