Hi, I’m Ahmad Mahfouz (_N1X_). I currently serve as an Application Security Manager at ServiceNow, bringing over a decade of hands-on and strategic experience protecting enterprise cloud platforms (ServiceNow) and critical global financial infrastructure (S.W.I.F.T.).

unixawy.com is my personal blog and digital notebook—a space where I share my thoughts, technical experiments, vulnerability research, and practical engineering solutions. Here you will find writeups ranging from Linux internals and memory exploitation to modern AppSec architecture, cloud security, and agentic AI systems.

I bridge deep offensive technical tradecraft (GXPN, OSCE, CRTE, CRTO) with high-level security leadership and governance (GSTRT, GSLC), helping engineering and security teams build resilient software at scale.

Core Focus Areas & Competencies

Application & Cloud Security: Secure SDLC (SSDLC), Threat Modeling, CI/CD Pipeline Security, SAST/DAST/SCA Integration, Multi-Cloud Security (AWS, GCP), and Container Security.

Offensive Operations & Red Teaming: Adversary Simulation & Purple Teaming (CRTE, CRTO); Advanced Exploit Research & VAPT (GXPN, OSCE); Wargames & Low-Level Systems Analysis.

Vulnerability Management & Governance: End-to-End Vulnerability Lifecycle Management; Risk-Driven Remediation; Security Strategy & Policy (GSTRT, GSLC); GDPR & European Regulatory Compliance.

AI Engineering & Automation: Context Engineering, Agentic System Design Patterns, Security Automation (Python, Ansible, Bash), and Semantic Process Integration.

Education and Key Certifications

  • Bachelor’s Degree in Information Systems – Delta University for Science and Technology
  • Business Communication – Rochester Institute of Technology (RIT) on EdX
  • Blockchain Specialization – University at Buffalo, The State University of New York
  • GIAC Advisory Board – GIAC Certifications
  • GIAC Strategic Planning, Policy, and Leadership (GSTRT) – GIAC Certifications
  • GIAC Security Leadership (GSLC) – GIAC Certifications
  • GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) – GIAC Certifications
  • Certified Red Team Expert (CRTE) – Altered Security
  • Certified Red Team Operator (CRTO) – ZeroPoint Security
  • Offensive Security Certified Expert (OSCE) – Offensive Security (OffSec)

Connect with me: GitHub | LinkedIn | X (Twitter)