Deema Megharee
I'm Cybersecurity Engineer
About
Cybersecurity Engineer specializing in Offensive Security, Penetration Testing, and Red Team Operations. Holder of the eLearnSecurity Certified Professional Penetration Tester (eCPPTv3) certification, with practical experience in assessing web applications, networks, and enterprise environments through realistic attack simulations and security assessments.
My expertise includes web application penetration testing, vulnerability assessment, network exploitation, reconnaissance, privilege escalation, post-exploitation, and security reporting using industry-standard tools and methodologies. I continuously develop my skills through hands-on labs, Capture The Flag (CTF) competitions, and real-world offensive security scenarios.
I was awarded 1st Place in the Capture The Flag (CTF) Cybersecurity Competition across the West Bank and Gaza during the AI Olympics, demonstrating advanced technical skills in offensive security, problem-solving, and teamwork under competitive conditions. The AI Olympics brought together university teams from across Palestine to compete in multiple technology tracks, including cybersecurity.
Beyond technical work, I am passionate about cybersecurity education and community impact. I have organized cybersecurity workshops and awareness initiatives, helping students and Arabic-speaking communities strengthen their understanding of digital security and responsible online practices.
My goal is to contribute to organizations by identifying and mitigating security risks through ethical hacking, penetration testing, and continuous learning, while staying aligned with the latest developments in offensive cybersecurity.
Cybersecurity Engineer
Cybersecurity Engineer specializing in Offensive Security, Penetration Testing, and Red Teaming. eCPPTv3 Certified, passionate about ethical hacking, vulnerability assessment, and building secure digital environments. CTF Champion 1st Place at AI Olympics (West Bank & Gaza).
- Birthday: 2003-10-04
- Website: https://www.vywenemuf.info
- Phone: 0592673113
- City: Palestine - Gaza - Nuseirat
- Age: 22
- Degree: Bachelor's
- Email: dmegharee@smail.ucas.edu.ps
- Freelance: Available
Certificates Earned
Projects
Hours of Training course
Skills
Skills
Resume
ADMIN.Education
eLearnSecurity Certified Professional Penetration Tester (eCPPTv3)
INE Security
Earned the eLearnSecurity Certified Professional Penetration Tester (eCPPTv3) certification, demonstrating practical skills in penetration testing, vulnerability assessment, exploitation techniques, and offensive security methodologies.
Red Teaming, Ethical Hacking, Bug Hunting & Penetration Testing Certificate
Udemy
Completed a comprehensive course covering Red Team operations, ethical hacking methodologies, bug hunting techniques, vulnerability assessment, and penetration testing practices.
Red Teaming, Ethical Hacking, Bug Hunting & Penetration Testing Certificate
Red Nexus Academy
Completed a comprehensive course covering Red Team operations, ethical hacking methodologies, bug hunting techniques, vulnerability assessment, and penetration testing practices.
21st Century Skills & Freelancing Online Work
International Organization for Education, Science and Culture (IESCO)
This course combines essential modern skills — including critical thinking, creativity, collaboration, and communication — with practical freelancing competencies such as professional branding, self-marketing, and managing remote client relationships.
Workshop: Getting Started with Freelancing
UNIHUB
The workshop introduces participants to the freelancing world, guiding them through the initial steps, key freelancing platforms, proposal and communication skills, and building a strong online reputation.
Java 2 Course
Edu Vista Center for Training and Development
Completed training in Java programming language focusing on object-oriented concepts, control flow, and data handling.
ICDL Course (International Computer Driving License)
Edu Vista Center for Training and Development
Completed the ICDL certification covering essential computer skills and office applications, enhancing my technical and practical abilities.
Bachelor's
University College of Applied Sciences
Currently a student in Cybersecurity Engineering, maintaining an outstanding cumulative GPA of 97.3%. Actively developing my academic and practical skills
General Secondary Education Certificate
Mamdouh Saidam Girls School
Graduated from the Scientific Stream with an excellent cumulative GPA of 99.4%. Academically outstanding with a strong passion for science and technology.
Professional Experience
Technical Trainee
Jawwal Palestine
-
Participating in a rotational training program across multiple technical departments, gaining practical exposure to enterprise IT and cybersecurity operations.
-
Collaborating with specialized teams in areas including Database Administration (DBA), Software Development, System Analysis, Quality Assurance (QA), Governance, Artificial Intelligence (AI), and Infrastructure.
-
Developing hands-on experience in enterprise technologies, secure software development, APIs, Oracle APEX, IT governance, and business process automation.
-
Strengthening technical, analytical, and problem-solving skills by working with cross-functional teams in a real-world corporate environment.
President of the Engineering Club UCAS
University College of Applied Sciences
-
Led the Engineering Club's strategic planning and supervised its committees and activities.
-
Organized engineering, technology, and cybersecurity events, workshops, and competitions.
-
Coordinated with faculty members, industry partners, and student organizations to build collaborations and opportunities.
-
Represented the Engineering Club at university events and official meetings.
-
Managed project execution, delegated responsibilities, and ensured successful delivery of club initiatives.
-
Promoted student engagement, leadership development, and innovation through technical and community activities.
Network & Infrastructure Security Trainee
Modern Smart Solutions
-
Completed 30 hours of hands-on training in Network and Infrastructure Security.
-
Configured and analyzed SNMP and Syslog for network monitoring and logging.
-
Implemented NAT/PAT to manage network address translation and optimize connectivity.
-
Configured and secured VPN solutions for encrypted remote communication.
-
Explored Firewall technologies, security policies, and traffic filtering techniques.
-
Worked with Intrusion Detection and Prevention Systems (IDS/IPS) to detect and mitigate network threats.
-
Strengthened practical skills in securing enterprise network infrastructure and applying security best practices.
Cybersecurity Basics (Online)
Engineering Club UCAS
Organized an online workshop targeting first-year students to introduce fundamental concepts of information security. The workshop aimed to raise cybersecurity awareness and basic protection techniques, covering cyber threats, defense methods, and the importance of strong password practices.
"Future Pioneers" Project – Funded by the State of Kuwait
UCAS Incubator
Thrilled to be selected among the top 50 students in the Talents Incubator and Innovators Program, funded by the International Islamic Charitable Organization – Kuwait, out of over 10,000 applicants!
After interviews and challenges, I ranked 3rd among finalists.
Excited to grow, innovate, and learn from top professionals.
Vice President of the Engineering Club UCAS
University College of Applied Sciences
-
Organized technical events and workshops.
-
Coordinated with external partners to provide certified training and workshops.
-
Promoted technological awareness among students and the community.
Projects
- All
- Web
- Network
- database
- Embedded systems
- operating system security
- Risk Management
- Scientific research
Hospital System Network Design
Develop an efficient and integrated network for the headquarters and branch. • Ensure dynamic IP address allocation using DHCP. • Segment the network into departments using VLANs to enhance performance and security. • Implement routing protocols to facilitate communication between different locations.
Disaster Recovery and data movement
Disaster recovery refers to the procedures and techniques used to quickly restore data and restore systems after a disruption or disaster, such as a cyberattack or hardware failure. Data movement is the process of moving data from one location to another—such as between servers, or from an on-premises environment to the cloud—while maintaining its integrity and confidentiality.
Filling Machine
Statement We are to design an embedded system which controls a filling machine that works as follows: Empty bottles move on a conveyer belt, when a bottle is detected, the conveyor belt stops, a filling machine starts working for a specified period of time after which the filling machine stops. The total number of filled bottles is increased by one and shown on a common cathode 7-Segments display, the conveyor belt starts again and the machine does the same thing for the next bottle and so on. When the total number of bottles reaches nine the machine stops for 3 manual packaging. Meanwhile, one LED lights on an 8-LED-row and moves back and forth. The conveyor belt does not start again until the resume button is pressed. Moreover, the LED array turns off
Project LCD
This project demonstrates the integration of the LM016L LCD module with a microcontroller system to display real-time information. The LM016L is a versatile 16×1 character LCD, widely used due to its compatibility with many microcontrollers and ease of implementation. The project showcases: Clear understanding of LCD pin configuration Efficient data transmission to the display Practical applications like displaying sensor data, system status, or menus This setup can be adapted for various embedded systems such as smart devices, monitoring dashboards, or automation panels. The simplicity and flexibility of LM016L make it ideal for rapid prototyping and final product development.
Operating system security (Practical )
we implemented multiple techniques to secure the operating system and ensure data confidentiality and integrity. The activities included: Enabling BitLocker Encryption: We encrypted the system drive using BitLocker to protect data in case of device loss or theft. Testing Access from Another Account or OS: We attempted to access the encrypted data using a different user or system, confirming it was inaccessible without the proper keys. Using EFS (Encrypting File System): We encrypted specific user-level files using EFS to ensure data protection within the same system. Key Management: We explored how encryption keys are stored and the risks of losing access if recovery keys are not backed up. Vulnerability Analysis: We discussed potential security gaps, such as poor recovery key protection or elevated privilege misuse. Security Recommendations: We suggested security enhancements like enabling two-factor authentication, restricting user privileges, and securely backing up keys.
E-Commerce Backend Development (PHP & MySQL)
This online shopping platform demonstrates my ability to develop the back-end of a full-stack web application using PHP and MySQL. The project provides a strong foundation for e-commerce functionality, focusing on secure data management and order processing.
SQLi & XSS
This project involved testing a vulnerable demo website (https://demo.testfire.net) to identify and analyze common web vulnerabilities, specifically SQL Injection and Cross-Site Scripting (XSS). Various techniques were applied to demonstrate how attackers exploit these flaws to access or manipulate data.
Risk assessment Report
This report summarizes a cybersecurity risk assessment of UCAS’s web systems (HTTP and HTTPS), conducted using OWASP ZAP (version 2.16.1) external and web application scans, aligned with CWE and OWASP Top Ten (2021) frameworks. The assessment identifies and prioritizes risks to critical assets like user data and academic services, recommending controls to enhance security.
Comparison between risk assessment standards
Risk management is a basic component of cyber security and information protection. Different contours and standards are designed to guide organizations in effective management of risks. The most acclaimed ISO/IEC 27005 and NIST RISK Management Infrastructure (RMF), especially NIST SP 800-30 Chapter 1. This report provides a detailed comparison between these two risk management approaches.
Risk Concepts Report
In a rapid digital world, organizations face a growing selection of cyber security risk that jeopardizes the data and the system's privacy, integrity and accessibility. From ransomware attacks to fractures of data and weaknesses in the supply chain, cyber threats have become more sophisticated and harmful. This report presents examples of the real world of cyber security incidents between 2023 and 2025, which affects large organizations in different fields. By analyzing the type of risk, its source, affected property, weaknesses and effects, the purpose of the report is to emphasize the importance of strong safety measures and the need for continuous risk assessment and molding strategies.
Locality of Different Programs
With the increasing complexity of software applications and the growth of data volume, the efficiency of the memorial system has become an important factor in increasing the processor's performance. Cash memory data plays an essential role in reducing access to the delay, and understanding the behavior of the "access area" is one of the most impressive factors that affect the Cache performance. The purpose of this project is to use SMPCCHE 2.0 simulator to analyze cash behavior when performing multiple programs through tracking and analysis of memory track files.
Scientific research
Given the quick digital changes that educational institutions are going through, the purpose of this study was to find out how faculty and university students feel about the use of artificial intelligence (AI) technologies in creating mechanisms for evaluating academic performance in e-learning environments. An electronic questionnaire was created and sent to a sample of 29 college students and 4 faculty members as part of the study's descriptive-analytical methodology. It addressed three primary topics: feedback types, the possibility of incorporating AI into evaluation, and implementation challenges. The study data was also analyzed using a number of statistical techniques and the Statistical Package for the Social Sciences (SPSS).
Web for company
<p>I designed a modern and responsive front-end for a professional company website, focusing on clean layout, smooth navigation, and visual appeal. The website includes essential sections like:</p> <ul> <li>Home – With a welcoming hero banner and clear introduction.</li> <li>About Us – Presenting the company’s values and goals.</li> <li>Services – Showcasing what the company offers with icons and short descriptions.</li> <li>Contact – With a working form and interactive map.</li> </ul> <p>HTML5 | CSS3 | JavaScript | Bootstrap 🎨</p>
Website for skin care products
<p>I designed a user interface for a skincare products website. It features an elegant, responsive design that displays products in an organized and attractive manner, with dedicated pages for details, about us, and contact information. The website aims to provide a convenient and visual shopping experience using HTML, CSS, and JavaScript. </p>
Website for a furniture company
<p>I designed a website for a furniture company that showcases products in a modern and organized style. The website displays furniture items with photos and prices, along with sections for company profiles, services, and contact information. The design is responsive and user-friendly, utilizing HTML, CSS, and JavaScript to provide a smooth and engaging browsing experience for customers.</p>
Dashboard laravel e_shop
<p>A professional control panel was developed using Laravel to manage a comprehensive and easy-to-use online store. This backend is powerful, secure, and easy to customize, enabling store owners to manage daily operations efficiently.</p> <ul> <li>🔧 Key Features:<br>Product Management: Add, edit, delete, and categorize products, set prices and discounts.</li> <li>Order Management: Track order status (in progress, completed, canceled), and view details for each order.</li> <li>User and Customer Management: View customer information and control user permissions (admin/user).</li> <li>Analytics and Charts: View sales statistics, product count, and monthly profits using charts.</li> <li>Category and Brand Management: Flexiblely organize products into multiple categories.</li> <li>Notification System: Alert the administrator of any important operations, such as a new order or a product out of stock.</li> <li>General Settings: Control store settings such as currency, language, contact information, and logo.</li> <li>Multilingual Support (Optional): Multilingual interface (e.g., Arabic and English).</li> </ul>
Services
Website Security Assessment
Identify and fix vulnerabilities in your website to prevent cyberattacks and protect user data.
Learn MoreMalware Analysis
Uncover and understand hidden threats in your systems through advanced malware analysis.
Learn MoreRisk Analysis
Identify and mitigate cybersecurity risks before they turn into real threats.
Learn MoreWorkshops & Training
Hands-on workshops and expert-led training in tech and cybersecurity fields.
Learn MoreSecure Back-end Development
Secure, scalable, and efficient back-end development using PHP and Laravel.
Learn MoreNetwork Design and Simulation with Packet Tracer
Create and test realistic network setups using Cisco Packet Tracer simulation tool.
Learn MoreTestimonials
Deeply appreciate your efforts and the valuable knowledge shared in the workshop. May Allah reward you and grant you more success. It was a highly beneficial and well-organized session.
May Allah bless you abundantly and reward you with all goodness. May He increase your knowledge and experience, and make you a source of benefit for Islam and Muslims. Thank you so much, you truly deserve all the best. 🤍✨
The student presented a well-structured project on Risk Analysis, demonstrating strong understanding of threat modeling, impact assessment, and risk prioritization. The work effectively connects cybersecurity threats to business impact, showing clear analytical thinking and practical relevance
The student demonstrated strong analytical skills in analyzing malware behavior. The project was technically sound and well documented.
The workshop was clear and engaging. I learned a lot about online threats and how to protect myself practically
Contact
Address
Palestine - Gaza - Nuseirat
Call Us
0592673113
Email Us
dmegharee@smail.ucas.edu.ps