AHMAD-NOOR OTOUM · AMMAN, JORDAN

Web Developer
& Web Application Pentester

I build web applications and security-focused technical solutions, combining software development with offensive security.

WEB DEVELOPMENT WEB SECURITY CTF & RESEARCH
01 / PROFILE
Portrait of Ahmad-Noor Otoum
Ahmad-Noor Otoum
BASED INAMMAN, JORDAN
01 — ABOUT

Development and security, in the same workflow.

I’m Ahmad-Noor Otoum, a Jordan-based web developer and web application penetration tester. I bring product thinking and an attacker’s perspective into the same workflow, helping teams create digital experiences that are polished, dependable, and built with security in mind.

My work spans responsive websites and web applications, authorized security assessments, hands-on research, and CTF challenge design. I enjoy turning complex requirements into clear user experiences, then asking the harder questions: where can this break, what does the evidence show, and how can it be improved?

I’m studying Cybersecurity at Al al-Bayt University, while building real-world experience with client work and technical projects. Whether I’m developing a website or testing an application, I value thoughtful communication, clear scope, and practical results.

Web Development

Websites, platforms and technical products.

Web Application Security

Authorized testing and vulnerability analysis.

Security Research

Practical research, labs and offensive security.

CTF Development

Challenges built around realistic attack scenarios.

Based in Jordan · Working with clients locally and internationally · Arabic and English

02 — SERVICES

Thoughtful work.
Measurable impact.

One point of contact from the first conversation to the final handover—whether you need a digital product built, a security question answered, or a team empowered to work more safely.

01

Web Development

Premium, responsive websites and web applications shaped around your goals, your users, and your brand. From interface and implementation to launch-ready polish, with security considered from the first decisions.

Discuss your project
02

Penetration Testing

Scoped, authorized assessments of web applications and APIs. Receive clear evidence, risk context, and practical remediation guidance to help your team prioritize fixes with confidence.

Discuss your project
03

Security Training

Practical, audience-focused workshops and lab sessions that make web security easier to understand—from how common attack paths work to the habits and controls that help prevent them.

Discuss your project
04

CTF Challenge Design

Original, well-scoped CTF challenges for universities, events, and organizations. Shape a full learning experience with realistic scenarios, meaningful hints, and clear solution paths.

Discuss your project
03 — EXPERIENCE

Experience that shaped how I work.

PREVIOUS

Cybersecurity Trainer

Confidential

6 months

Delivered cybersecurity training and practical security education.

  • Cybersecurity training and curriculum support
  • Hands-on lab instruction for learners
  • Supported students in cybersecurity topics
CURRENT

Web Developer

Tech Visions

Present

Building websites and web applications for clients, with security considered from the start.

  • Client website and web application development
  • Responsive, production-ready front-end builds
  • Security-conscious development practices
04 — CAPABILITIES

Tools for building, testing and securing digital work.

A practical toolkit across application security, modern web development, infrastructure, and technical research.

Offensive Security

Penetration TestingWeb SecurityVulnerability AssessmentCTF Development

Security Tools

Burp SuiteNmapMetasploitKali LinuxffufsqlmapWPScan

Development

TypeScriptJavaScriptReactNext.jsNode.jsPythonPostgreSQL

Network & Infrastructure

NmapWiresharkBloodHoundLinuxWindowsActive Directory

Scripting

BashPowerShell

Reverse Engineering

GhidraIDA Freex64dbgGDB
05 — SELECTED WORK

Built with care.
Designed to work in the real world.

A selection of client-facing development and security-focused product work. Some details remain private by agreement.

01CLIENT PROJECTLive
Elite Salzburg website preview
Web Developer

Elite Salzburg

A premium website for a private chauffeur and tour service in Salzburg, Austria, covering transfers and trips with direct WhatsApp booking.

Web DevelopmentResponsive DesignWhatsApp Booking
Explore live site
02SECURITY PROJECTPrivate
AX1SECURITY OPERATIONS
EXPOSURE INTELLIGENCE
Web Developer

AX1

Security Operations & Exposure Intelligence Platform, currently in progress. Details are private and shared with authorized clients only.

Security OperationsExposure Intelligence
Shared privately
06 — CTF & RESEARCH

Practical security work, built around real scenarios.

Challenge authoring, labs and competitive security work are part of how I keep technical skills sharp.

CTFBUILD · TEST · LEARN
01

Kali Team

Collaborative capture the flag team participation and puzzle solving.

CTF Player
02

Thryve

Cybersecurity capture the flag challenge design and creation.

CTF Author
03

BRKCYS

Competitive capture the flag challenge development and authoring.

CTF Author
04

CYSC Campus CTF — Al Hussein Technical University (HTU)

Event organization, coordination, and challenge authoring for campus-wide cybersecurity competitions.

Organizer
05

TryHackMe

Continuous hands-on cybersecurity labs, learning paths, and offensive security rooms.

CTF Player
06

Hack The Box

Penetration testing labs, capture the flag exercises, and security research.

CTF Player
07

Black Hat 2026

Qualified for the Black Hat capture the flag competition.

Qualified
07 — CERTIFICATIONS

Credentials, kept simple.

KWAPTA

Passed — 100%

Completed

eCPPT

eLearnSecurity Certified Professional Penetration Tester. Currently preparing for examination.

Preparing
08 — HOW I WORK

A clear process.
Thoughtful at every step.

Good work starts with shared expectations. Each engagement is scoped around your goals, timeline, and the level of access required.

01

Discuss

We start with your goals and what you need.

02

Scope

We agree on scope, timeline, and confidentiality in writing.

03

Build or test

I build the site or run the assessment within that scope.

04

Deliver

You get the finished work, or a report with findings and fixes.

09 — GOOD TO KNOW

Questions, answered.

A few details about working together, project scope, and getting started.

Yes. I work under written agreements and keep client details confidential.

10 — CONTACT

Have a project in mind?

Let's build something.