My My 1st 2 weeks At EY Mena and the Cybersecurity Journey That Led Me to EY✨

Joining EY MENA was a significant milestone in my career, but it was not the beginning of the story.

I’m Omar Sharaky, a Senior Cybersecurity Consultant specializing in penetration testing & red teaming, working with clients across the MENA region.

“What truly shaped my journey wasn’t just the roles I held, but the perspectives I built early on by experiencing cybersecurity from both sides of the equation as a Cybersecurity Consultant in a service provider and as part of an internal Application Security team for a reputable company”

• On the service‑provider side, I delivered penetration testing across multiple industries, gaining a front‑row view of how vulnerabilities surface in diverse environments.
• On the client side, working in application security, I saw firsthand how organizations interpret, prioritize, and remediate the findings we exploit.

“That dual exposure fundamentally changed how I view cybersecurity and continues to influence how I approach cybersecurity challenges today.”

• As a penetration tester, my work centered on uncovering vulnerabilities, providing remediation steps, and reporting them effectively.
• As an application security engineer, I learned to see the bigger picture: how those vulnerabilities impact actual systems, business operations, and decision‑making

The mindset that started early

Before entering the professional world, I adopted a mindset that continues to shape how I operate today.

“Proactive learning before it is required.”

During my time at Coventry University (one of the top universities in the UK), I did not wait for semesters to begin.

Instead, I used every summer intentionally:

• Pursuing hands-on internships across multiple domains.
• Completing professional certifications aligned with upcoming courseworks.
• Building practical exposure before academic exposure.

This approach created a clear advantage.

When topics were introduced in university, I had already:

• Practiced them
• Applied them
• Understood their real-world implications

Along this journey, I continued investing heavily in my development, and until today, I have achieved 20+ professional certifications across multiple cybersecurity domains, building a strong and well-rounded foundation.

Discipline Beyond Academics

At the same time, I was pursuing a completely different path in parallel.

For over 12 years until I was 22. I represented Egypt as a professional Taekwondo🥋athlete, a sport and passion that I started since I was 4 years old:

• Representing my country, Egypt, internationally
• Being ranked #2 worldwide as a professional athlete🌍
• Traveling 10 to 12 weeks annually for international camps and competitions 🏆
• Achieved World, African, and Arab Titles multiple times Alhamduillah☝🥇

This lifestyle required a different level of discipline:

• Studying ahead before traveling
• Managing time with precision
• Maintaining consistency under pressure

There was no room for falling behind.

• Missing a deadline, academic or professional, was never an option.
• Not meeting a target, no matter how small, was not acceptable.
• I hold myself to a standard where being anything less than my personal best isn’t enough. If I promise myself, I will overachieve it, I pursue it relentlessly until I do.

That mindset carried forward into everything that followed even into my professional career.

Where It All Started More Than Just Penetration testing

Over the past 4 years, I have worked within a service provider, progressing from:

Intern → Junior → Mid-Senior to Senior Penetration Tester Shadowing/Supporting engagements to leading critical projects.

During that time, I was exposed to:

• 40+ clients across multiple Industries in Egypt including:
• Banking industry
• Fintech industry
• E-commerce industry
• Telecommunications industry

One of the most defining experiences was working on core banking systems like Temenos T24, where the margin for error is zero and the impact is real.

But here is the uncomfortable truth most people ignore:

“Finding vulnerabilities does not make you valuable. Translating them into business risk does.”

That is where I started differentiating.

Not just exploitation but:

1. Clear reporting
2. Executive explanation
3. Actionable remediation

Understanding Cybersecurity from Both Sides

Beyond working as a consultant, I also gained experience on the client side in application security.

This added a critical layer of understanding:

• Why some findings are prioritized and others ignored.
• What makes a report actionable for internal teams.
• How business context influences security decisions.
• How findings are remediated through close collaboration with DevSecOps teams.

This perspective reshaped how I approach penetration testing.

Security is not just about identifying weaknesses. It’s about ensuring those weaknesses are clearly understood and effectively addressed.

The EY Interview, A Different Level Conversation

When I went through the interview process at EY, it became clear that the expectations were different.✨

The discussion was not limited to tools, techniques, or exploitation depth.

It focused on:

• How I think
• How I communicate
• How I deliver value to clients

The conversations I’ve had with my current manager and counselor, whom I deeply appreciate and feel fortunate to be mentored by, consistently emphasized the importance of a consulting mindset, clarity, and adaptability.

That was the first clear signal.

This role is not just about penetration testing. It is about Professional Cybersecurity Consultancy.

But equally important was everything that happened around the interviews. The talent acquisition team, led by truly talented individuals, along with the entire pre‑joining and onboarding teams, provided support that was invaluable. ✨ From clear communication, to guidance, to ensuring I had everything I needed, they set the tone for what EY’s culture really is.

First Days at EY More Than an Onboarding

From the first days, what stood out at EY was not just the structure, but the environment.

• A welcoming and supportive culture
• Clear onboarding and guidance
• Strong collaboration across teams

It quickly felt less like joining a company and more like joining a team that genuinely invests in its people.

This created a strong sense of responsibility.

To contribute, to grow, and to deliver at a higher standard.

The support I received from my buddy and my cybersecurity team in facilitating every new process, requirement, and guideline was crucial. They made everything smooth and helped me quickly get to know the teams in Egypt and across the region. I’m genuinely looking forward to working with each of them on the interesting engagements ahead. 🚀

A Learning Experience That Stands Out

One of the most impactful parts of my early journey at EY has been the learning ecosystem.

Within a short period, I completed more than 20+ eLearning modules across different formats.

What made the difference was not the number, but the depth.

These were not the kind of courses to complete quickly. They were experiences that required attention and reflection.

They focused on:

• Strengthening consulting fundamentals
• Enhancing communication and stakeholder management
• Reinforcing professional judgment and adaptability
• Aligning behavior with strong ethical and professional standards

What stood out most was how practical and informative the learning was.

It directly influenced how I think and operate as a cybersecurity consultant.

It shifted my mindset from simply finding issues to delivering real value through those findings for high‑stake clients.

From Penetration Tester to Cybersecurity Consultant

This transition is where the real impact lies.

This mindset is something I began developing early in my career, but EY strengthened and refined it with exceptional knowledge, delivered in the best format.

Technical expertise remains essential, but it is only part of the equation.

What truly matters is:

• How findings are communicated
• How risks are contextualized
• How solutions are positioned
• How trust is built with clients

The learning experience at EY reinforced that a strong consultant combines technical depth with clarity, adaptability, and responsibility.

Looking Ahead

Today, my focus is clear:

• Deliver high-quality penetration testing engagements.
• Translate technical findings into meaningful business insights.
• Commit to continuous learning and consistently improving my knowledge‑transfer approach.
• Support my team and clients across the MENA region.

Most importantly, I aim to combine technical expertise with a consulting mindset to create real impact.

Final Thought

Every phase of the journey mattered:

• Early proactive learning.
• Discipline shaped by competing at the highest level of sports.
• Exposure across industries.
• Experience from both sides of cybersecurity

All of it led to this step.

Being part of EY now represents more than an achievement. It is an opportunity to grow further, contribute meaningfully, and help shape a more secure digital future with confidence.

EY

EYMENA

BetterWorkingWorld

ShapeTheFutureWithConfidence

Consultancy

Cybersecurity

PenetrationTesting