About Jobyer Ahmed
Finding what attackers would find. Penetration testing, red team operations, and vulnerability research, since 2010.
I'm Jobyer Ahmed. I've spent about fifteen years finding ways into systems, red teaming companies and digging up bugs in software people thought was safe.
What I do hasn't changed much over the years. Companies bring me in to find the holes in their security and explain what I find clearly enough that someone can actually fix it. I started Bytium LLC in 2024 to keep doing this with a small, senior team, where the person you hire is the person doing the work.
Experience
8 positions
Jan 2024 - Present
CurrentFounder & Security Lead
Bytium LLC
Cybersecurity consulting focused on offensive security, penetration testing, and security engineering.
2022 - 2024
Security Consultant & Advisor
BrosPly Ltd · Remote
Cybersecurity consulting on architecture, vulnerability assessment, and compliance alignment.
Feb 2022 - Jan 2024
Founder & Cybersecurity Researcher
Rednode Services Ltd
Established a security lab for exploit development and vulnerability research; published CVEs.
Oct 2022 - May 2023
Penetration Tester (Contract)
Red Team Partners · London, UK
Enterprise penetration testing across web, infrastructure, and cloud environments.
Jan 2021 - Aug 2021
Penetration Tester
Cyber Armed Security · United Kingdom
Jun 2020 - Dec 2021
Penetration Tester
Freelancer.com · Remote
Feb 2010 - Jun 2021
Cyber Security Specialist
Self-employed
Feb 2007 - Jan 2014
Technical Support Specialist
Self-employed
Certifications
9 total
Flagship
OffSec
Offensive Security Certified Expert 3 (OSEP + OSWE + OSED)
OffSec's most advanced offensive designation, earned by completing the three expert-level exams below: Experienced Penetration Tester, Web Expert, and Exploit Developer.
CISSP
Certified Information Systems Security Professional
OSCP
Offensive Security Certified Professional
OSEP
Offensive Security Experienced Penetration Tester
OSWE
Offensive Security Web Expert
OSED
Offensive Security Exploit Developer
CNVP
CompTIA Network Vulnerability Assessment Professional
PenTest+
CompTIA PenTest+ (CE)
Security+
CompTIA Security+ (CE)
Published CVEs
Vulnerabilities found in production software and disclosed responsibly to the affected vendors.
Publications & recognition
- Exploit-DB #52100: RISE CRM 3.7.0 SQL Injection Exploit2024
- Hack The Box · RastaLabs completion
- Training workshops on secure development and pentestingOngoing