Ayman Osama Algamal

- Selected for Google Summer of Code 2026 with the OWASP Foundation (∼7.5% acceptance rate; 1,141 of 15,245 applicants) to port Microsoft’s Elevation of Privilege threat-modeling deck into Cornucopia’s web-based Card Browser. - Delivered REST API endpoints serving 78 EoP cards with STRIDE security mappings in 3 languages, documented with OpenAPI and covered by automated tests. - Built a secure Python scaffolding pipeline with path-traversal prevention and 28 unit tests to generate card data structures, and reverse-engineered pixel-accurate card styling from the original deck’s PDF. - Strengthened software supply-chain security by generating CycloneDX SBOMs for all 3 modules and wiring them into the CI/CD release pipeline with Dependency-Track upload. - Cut CI security-scan runtime from 6+ hours to ∼3.5 hours by diagnosing and fixing an OWASP ZAP misconfiguration that was breaching the GitHub Actions job limit.

- Led a one-week migration from an unreliable custom sync layer to PowerSync, eliminating data-loss incidents on unstable networks and scaling an offline-first LMS (50K+ Google Play downloads) from 2 to 35 institutions, including some of Egypt’s most-followed high-school instructors. - Owned the diagnosis of recurring sync failures blocking adoption, identifying PowerSync as the replacement for ad hoc conflict handling and driving the migration across the Node.js/Flutter stack. - Coordinated with the AI team to integrate a RAG-based assistant into the app, and cut cloud OCR cost by adding caching that stopped the pipeline re-scanning previously processed documents on every upload (reducing repeated work from quadratic to linear).