Abdelkader is available for hire
Hire AbdelkaderAbdelkader Hannache
Verified Expert in Engineering
Cybersecurity Engineer and Developer
Windsor, ON, Canada
Toptal member since April 24, 2026
Bio
Abdelkader is a penetration tester with a background in software engineering. He specializes in penetration testing, threat modeling, risk analysis, and secure web application and API design. Skilled in OWASP, secure code review, and black-box, grey-box, and white-box testing, he bridges the gap between attacker and developer perspectives. Abdelkader also builds security scanners and aligns designs with ISO 27002 and COBIT to deliver end-to-end protection against evolving threats.
Portfolio
Self-employed
Burp Suite, Django, OWASP Zed Attack Proxy (ZAP), Python, NMap, Nessus, Wazuh...
Outlier AI
C++, Python, Methodology, Reinforcement Learning from Human Feedback (RLHF)
ESI Technologies
Burp Suite, OWASP Zed Attack Proxy (ZAP), Aircrack-ng, Penetration Testing...
Experience
- Linux - 10 years
- Windows - 10 years
- OWASP Zed Attack Proxy (ZAP) - 5 years
- Penetration Testing - 5 years
- Burp Suite - 5 years
- Software Engineering - 5 years
- Networking - 4 years
- Python - 3 years
Preferred Environment
Linux, Windows, OWASP Zed Attack Proxy (ZAP), Burp Suite, NMap, Python, C, MySQL, Metasploit, Penetration Testing
The most amazing...
...accomplishment has been authoring The Conclusion in Computer Systems while conducting 50+ professional penetration tests for major organizations.
Work Experience
Information Security Consultant | Penetration Tester | Software Developer
2023 - 2026
Self-employed
- Conducted more than 50 penetration testing projects, identifying and exploiting vulnerabilities in web applications and networks for multiple clients, including Bugcrowd and HackerOne.
- Developed and deployed multiple web applications using Python and Django, providing full hosting solutions on Ubuntu Linux servers for clients.
- Performed security assessments and vulnerability research, delivering detailed reports with mitigation strategies for clients across various industries.
Technologies: Burp Suite, Django, OWASP Zed Attack Proxy (ZAP), Python, NMap, Nessus, Wazuh, Linux, IT Security, Vulnerability Assessment
Analyst and Software Engineer
2024 - 2025
Outlier AI
- Rated and reviewed AI chatbot conversations to improve model accuracy and performance, leveraging multilingual expertise in English, French, and Arabic.
- Evaluated and analyzed AI-generated responses using software engineering knowledge to ensure technical accuracy and quality across multiple programming domains, including Python, C++, and C.
- Contributed to reinforcement learning from human feedback (RLHF) processes by providing specialized feedback in the software development domain, enhancing AI model reliability.
Technologies: C++, Python, Methodology, Reinforcement Learning from Human Feedback (RLHF)
Information Security Consultant | Penetration Tester
2019 - 2020
ESI Technologies
- Conducted external and internal network penetration tests, simulating real-world attacks to identify critical vulnerabilities in client infrastructures.
- Performed web application security assessments using OWASP methodology, tools like Burp Suite, OWASP ZAP, and Nessus to detect and report vulnerabilities.
- Executed Wi-Fi penetration tests, API security testing, and source code reviews, providing detailed remediation reports to development and security teams.
Technologies: Burp Suite, OWASP Zed Attack Proxy (ZAP), Aircrack-ng, Penetration Testing, Phishing Simulation & Analysis, Application Security, Vulnerability Assessment
Penetration Tester
2018 - 2019
Virtual Guardian
- Performed web application and network penetration testing using OWASP methodology, training business partners on security best practices.
- Conducted load testing and external and internal network assessments, delivering comprehensive vulnerability reports with actionable recommendations.
- Assisted cross-functional security teams in identifying and mitigating critical security risks across client web applications and network infrastructures.
Technologies: Burp Suite, nikto, OWASP Zed Attack Proxy (ZAP), whatweb, Metasploit, Application Security, Vulnerability Assessment
Independent Python and Django Developer
2018 - 2018
Rumma & Ko
- Developed and contributed to the Lino framework programming language, building high-level database web applications for client management systems.
- Designed and implemented a warehouse management web application for inventory management using the Lino framework, Python, and Django.
- Performed security assessments on web applications, identifying vulnerabilities and providing mitigation recommendations to ensure application integrity.
Technologies: Python, Django, Application Security, Vulnerability Assessment
State Computer Engineer
2011 - 2015
Direction of University Works Sidi Amar
- Managed and maintained network infrastructure and computer equipment, ensuring stable and secure operations for the university department.
- Developed and programmed a clocking system to accurately record employee delays and absences, improving administrative efficiency.
- Computerized and programmed the management service, developing custom software solutions for administrative and accounting management.
- Provided security advice and software usage guidelines to staff, promoting best practices in IT security and system administration.
Technologies: Windows, Visual Basic, Turbo Pascal, C++, Application Security
IT Teacher
2010 - 2012
National Institute of Elhadjar, Annaba
- Taught general computer science courses and database management to students, ensuring a comprehensive understanding of IT fundamentals and principles.
- Introduced and trained students in the use of office software and Microsoft Access, improving their practical skills in database management.
- Prepared detailed lesson plans and evaluation exams, ensuring structured and effective learning outcomes for all students in the program.
Technologies: Microsoft Office, Databases, Computer Science
IT Specialist
2009 - 2009
Computer Consumable Universe
- Installed and maintained computer equipment for clients, ensuring optimal performance and resolving hardware and software issues efficiently.
- Configured and programmed computer systems and peripherals, providing technical support and solutions to meet client requirements.
- Managed sales of IT products, advising customers on suitable technology solutions and ensuring high levels of customer satisfaction.
Technologies: Sales, Maintenance
Student in Computer Engineering | Trainee
2008 - 2009
Sonelgaz
- Conducted a study and developed an Algerian electrical charge prediction system using a neuro-fuzzy algorithm programmed in Visual Studio C# 2008.
- Implemented and tested a neuro-fuzzy prediction model under Windows XP Service Pack 2, successfully delivering results for the Sonelgaz regional driving center.
- Analyzed and researched artificial intelligence techniques, applying neuro-fuzzy systems to solve real-world energy prediction challenges.
Technologies: C#.NET, Visual Basic, Artificial Neural Networks (ANN), Fuzzy Logic, Data
Experience
DigitalSecurity1 Cybersecurity Website
https://www.digitalsecurity1.comI developed and deployed a fully functional cybersecurity website using Python and the Django framework. I was responsible for the full-stack development, server administration, and security configurations. I also implemented secure hosting on Ubuntu Linux with Apache/Nginx web servers, configured firewall rules with Iptables and UFW, and ensured SSL/TLS encryption with OpenSSL. The website serves as a platform for cybersecurity services and penetration testing consultancy.
Advanced Vulnerability Scanner with Attack Chaining
I developed a comprehensive vulnerability scanner that combines and exceeds the capabilities of industry-leading tools, including Burp Suite Pro and OWASP ZAP. The scanner was built in Python and incorporates advanced security testing features, including automated vulnerability detection, active and passive scanning, and a unique attack-chaining mechanism that allows multiple attacks to be linked and executed sequentially.
The tool can perform SQL injection, XSS, CSRF, command injection, and other OWASP Top 10 vulnerability tests. The attack chaining feature enables complex multi-step attack simulations, making it more powerful than traditional standalone scanners. The tool was developed based on extensive experience in penetration testing from over 50 real-world security assessments.
The tool can perform SQL injection, XSS, CSRF, command injection, and other OWASP Top 10 vulnerability tests. The attack chaining feature enables complex multi-step attack simulations, making it more powerful than traditional standalone scanners. The tool was developed based on extensive experience in penetration testing from over 50 real-world security assessments.
Education
2003 - 2009
Engineer's Degree in Computer Science and Engineering
University of Annaba - Annaba, Algeria
Certifications
JULY 2024 - DECEMBER 2025
Reinforcement Learning from Human Feedback (RLHF)
Outlier AI
SEPTEMBER 2018 - DECEMBER 2019
Attestation of College Studies (AEC) in Networking and IT Security
Ahuntsic College, Montreal
Skills
Tools
OWASP Zed Attack Proxy (ZAP), Metasploit, NMap, Nessus, Turbo Pascal, NGINX
Paradigms
Penetration Testing
Platforms
Linux, Windows, Burp Suite, Wazuh, Ubuntu 24.04
Languages
Python, C, C++, Visual Basic, C#.NET
Frameworks
Django
Storage
MySQL, Databases
Other
Vulnerability Assessment, Networking, IT Security, Application Security, Cisco, Firewalls, Security, Software Engineering, Algorithms, Artificial Intelligence (AI), Computer Architecture, Operating Systems, Methodology, Reinforcement Learning from Human Feedback (RLHF), Aircrack-ng, Phishing Simulation & Analysis, nikto, whatweb, Microsoft Office, Computer Science, Sales, Maintenance, Artificial Neural Networks (ANN), Fuzzy Logic, Data, System Administration, Cyber Defense, AI Model Training, Data Annotation, Exploits, injection
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring