u/ProcedureFar4995

سلام عليكم

قدامى job offer من شركه كبيره لكن مشكله انه بتطلب سفر لكردستان ٣ مرات . كل مره حوالى شهر. و السفر غالبا هيكون ف ديسمبر. انا بشوف اخبار عن ضرب كردستان بالمسبرات كل شويه . أخرهم من ٤ ايام. انا فرصه العمل دى كويسه اوى لكن خايف تحصل حرب ف كردستان و معرفش اسافر ارجع على مصر. ابنى طفل رضيع هيتولد ان شاء الله عن قريب و هيكون عنده شهرين لم اسافر و خايف اسافر معرفش ارجعله او تحصل حرب و انا هناك.

ايش الحل ؟

قدامى فرصه شغل ف شركه كبيره. مشكله ان الأوفر لازم اسافر كردستان ٣ مرات كل مره شهر. و انا شركتى الحاليه كويسه بس مش stable خالص و محدش عارف مستقبلها ايه. ف حين ان التانيه اكير بكتير. المشكله بس حوار كردستان ده. هو لو طيران مش شغال أو بلد فيها قلق مش هسافر. مشكله انى اسافر و دنيا تقفل او طيران يقفل كام يوم بسبب الضرب. انا قريت شويه ف الاخبار و بتضرب عادى بس مفيش ضحايا مدنين يعنى .

المشكله ف شركتى. ناس مشيت و شكلها ملهاش مستقيل او مستقره.

مش عارف.

حظ يساعدنى

I have a job offer that requires me to travel to Kurdstan 3 times. Each one is at least 1 month. Will travel in December. I keep seeing news on missiles and iran attacks. Is that common? I also saw the airport's closed. So I dunno , I don't want to come to kurdstan and be stuck and not travel back home.

​

جالي اوفر من شركة اكبر بكتير ومعروفة. بس الزيادة بسيطة اوي.

وكلمت المدير بتاعي قالي هحاول اجيبلك زيادة بس لسه.

*الشركة اللي انا فيها حاليا:*

المميزات:

الناس محترمة جدا والتعامل مريح. ريموت 90% ومحدش بيرخم ولا بيسأل بتعمل ايه. بتعلم حاجات كتير اوي.

العيوب:

الشركة لسه جديدة بقالها سنة. كان عندنا مشاكل في الورق والتصاريح ضيعت علينا شغل كتير وقعدنا فترات فاضيين. وناس تقيلة سابت الشركة الفترة اللي فاتت.

دلوقتي بيقولوا المشاكل اتحلت والشغل جاي. بس انا خايف. خايف في اي لحظة الدنيا تقف ونقفل.

*الشركة الجديدة:*

اسم كبير ومستقرة بقالها سنين في السوق. بس الزيادة مش كبيرة.

ومشكلتها اني هخسر الراحة والمرونة اللي انا فيها. وانا عندي ظروف عائلية صعبة اليومين دول ومحتاج ابقى موجود.

*انا تايه بين:*

1. اكمل في المكان الصغير يمكن يبقى كبير وانا اتعلمت فيه

2. اروح للاسم الكبير عشان الاستقرار والـ CV حتى لو الزيادة مش مستاهلة وبهدل نفسي

حد مر بالموضوع ده؟

واعرف منين ان "الشغل جاي" ده بجد مش كلام؟ اطلب يشوفوني عقود ولا ايه؟

انا حاولت ادخل هندسه و كنت بسقط بس ف حولت نظم و كملت دراسه برمجه . لكن مقدرتش انسى logic gates و كلام ده و مسحول ف ويبسايت ده :

https://www.nand2tetris.org/course

بعوض جزء الhardware و low level عندى علشان نفسة اشتغل security researcher ف شركه محترمه.

انا اعرف ويب ، موبايل ، و عندى فكره عن OS من فوق ك high view و شغال بج هانتر. لكن عايز ادوس ف الحجات ال low level زى Kernel exploitation , memory corruption و حجات ف OS نفسه . بقرا و اتعلم assembly حاليا و GNU C . الفكره ان حجات دى CVE احسن و بتخش حجات زى pwn2own و ليفل تانى.

السوال للخريجين هندسه بذات، معلومات خريج هندسه عم واحد self taught ف جزء الهاردوير و low level قد ايه؟ و ازاى اطور من نفسى علشان افهم كل حاجه A to Z

علما حوالت،اجيب قبل كده كومبيوتر من beneater و اتقفش ف المطار لول

I keep trying to memorise it but I fucking can't

There is just a lot of steps . ServerKeyExchange , CertificateVerify, and a lot of other shit. I am in the middle of interviews and some people like to ask about these fundamentals. I just fucking can't. Been trying for 2 fucking days man

After an engagement ends, we divide the findings between us(me and my collegues) and send the screenshots to each other and then I write some of my findings and his findings and he does the same.

Is this common? I feel I should only write my findings. But the issue happens if I have 4 findings and he has 10 . Should he divide them or just man up and write the 10 himself since he is the one who got them and will write better than me about them?

So 100$ each month is a lot. What is the best alternative?

I am thinking Deepseek or Kiwi?

Note I want something to be used with Claude Code. So probably something that I can use the API key with Claude Code. Not something I can chat with like Claude Desktop .

Update: I subscribed to openrouter and currently I am using Claude Code with Deepseek. Its working so well. I know its weird using Claude Code instead of pi or opencode. Might try them later. But so far so good

Each time I write a report I copy paste the finding table along with a lot of other shit. I end up spending a lot of time fixing the format of the doc.

Do you guys use a reporting tool where you can write the bug description, impact and have it automatically prepared for you??

عملت انترفيو و المنجر قالتلى انت عندك مشكله ف سفر ؟ قولت لا.

بعدين قالتلى ان هما بيعينوا ناس علشان بروجكت جديد ف كردستان و هضطر اسافر ٣ مرات . كل مره شهر.

و بعد كده مش هسافر تانى. بس برضه حسيت موضوع مش مضمون

و فتحت كده قريت عن كردستان و حسيت وضح ميطمتش خالص. عمله بايظه و حدود بايظه و كل حاجه بايظه و حسيت ممكن اروح اصلا مرجعش.

عندهم كلاينت هناك و هروح on site ٣ مرات . طل مره تقريبا شهر.

الفكره حاسس كردستان بلد تعبانه يعنى اقتصاديه و كمان امنيه مش احسن حاجه. ف مش عارف اقرر

I work as a pentester, so my day-to-day is network and appsec. On the side I've been trying to learn ARM assembly because eventually I want to hunt on low-level targets — Android kernel, browsers, that kind of thing.

Some context on where I'm at:

I have bug bounty experience and I reverse engineer regularly

The closest I've gotten to C is reading native libraries in Android apps, but the attack surface there is tiny

So most of my "learning" is reading ARM and C snippets in isolation, with no target to apply them to

That's the problem. Studying without hunting kills my interest fast. But I don't want to jump straight into hunting and discover I don't know enough to get anywhere.

So: what's the better path here — and specifically, what works if you have ADHD and can't sustain pure theory?

​

I work at the cybersecurity arm of a multinational firm. They launched it about a year ago and have been struggling ever since with paperwork and regulatory approvals just to deliver services.

**How the team has shrunk in one year:**

- Started with: 2 L2 assistant managers, 1 L1 assistant manager, 1 team lead, 4 seniors, 1 mid-level, 1 junior

- Since then: 2 seniors left, 1 assistant manager left, and the team lead left

- Now: 2 assistant managers (1 L2, 1 L1), 2 seniors, 1 mid-level, 1 junior

**But the attrition isn't what bothers me. It's this:**

- I earned my OSCP this year. It was supposed to come with a raise. It didn't. A full year with zero increase — the justification being that I "started on a good salary" and there isn't enough billable work to fund one.

- The two seniors who left weren't technically strong at all. They struggled with basic tasks. Meanwhile the pressure lands on the rest of us.

- There's barely any client work, so management tells us to self-study (CPTS path, research tasks, etc.). Then a random week or two later they ambush you with "so what have you been up to?"

- I tell them I've gone through the material multiple times and researched what they asked for, and that I learn by doing rather than reading. I list what I actually learned — X, Y, Z — and they immediately switch to attack mode: *"Is that it?" "How many hours did you spend on this?"*

- We have no real work. Why is the reaction to that anger at me? Track my hours when there's actual work to track.

**Micromanagement during engagements:**

- Daily end-of-day calls: "Tell me the test cases you completed today." I list them. Same response: *"Is that it?" "How many hours?"*

- If they have specific test cases in mind, just tell me. Skip the smirking.

- They also check in every few hours to ask what you're working on.

- The seniority culture feels military. Everything must be "aligned" with your senior, and they make you feel like a junior regardless of your level.

**Scoping and delivery:**

- Because they're a multinational, they sell man-days at a premium — but with few clients and low billing, engagements get compressed. A 7-day engagement gets crammed into 5.

- The report is always due in one day, no matter what we found.

- I'll own this part: my reports suffer because I'm rushed and anxious. (I've taken the advice from this sub to start writing the report as I work — doing that next time.)

**Management behavior:**

- In live meetings, mistakes get met with *"Is this your first time working?"* or *"Do you want me to come do your work for you?"*

- They never actually explain what's wrong. It's always a sarcastic *"why did you do it that way?"* — and sometimes they laugh when I ask questions.

- One time my teammates and I submitted a weak report. As punishment, the team lead made us come write it on-site — office is downtown in a packed area — then told us he'd meet with us, disappeared all day, and left us sitting there with nothing to do.

- Bad report = mandatory commute downtown. That's apparently the policy.

**The only upside** is that the work is hybrid, and honestly I'm no longer sure that's worth it.

The real problem: I keep interviewing and every offer I get is worse than what I have.

Is this normal for the industry, or should I be taking a pay cut to get out?

​

I work at the cybersecurity arm of a multinational firm. They launched it about a year ago and have been struggling ever since with paperwork and regulatory approvals just to deliver services.

**How the team has shrunk in one year:**

- Started with: 2 L2 assistant managers, 1 L1 assistant manager, 1 team lead, 4 seniors, 1 mid-level, 1 junior

- Since then: 2 seniors left, 1 assistant manager left, and the team lead left

- Now: 2 assistant managers (1 L2, 1 L1), 2 seniors, 1 mid-level, 1 junior

**But the attrition isn't what bothers me. It's this:**

- I earned my OSCP this year. It was supposed to come with a raise. It didn't. A full year with zero increase — the justification being that I "started on a good salary" and there isn't enough billable work to fund one.

- The two seniors who left weren't technically strong at all. They struggled with basic tasks. Meanwhile the pressure lands on the rest of us.

- There's barely any client work, so management tells us to self-study (CPTS path, research tasks, etc.). Then a random week or two later they ambush you with "so what have you been up to?"

- I tell them I've gone through the material multiple times and researched what they asked for, and that I learn by doing rather than reading. I list what I actually learned — X, Y, Z — and they immediately switch to attack mode: *"Is that it?" "How many hours did you spend on this?"*

- We have no real work. Why is the reaction to that anger at me? Track my hours when there's actual work to track.

**Micromanagement during engagements:**

- Daily end-of-day calls: "Tell me the test cases you completed today." I list them. Same response: *"Is that it?" "How many hours?"*

- If they have specific test cases in mind, just tell me. Skip the smirking.

- They also check in every few hours to ask what you're working on.

- The seniority culture feels military. Everything must be "aligned" with your senior, and they make you feel like a junior regardless of your level.

**Scoping and delivery:**

- Because they're a multinational, they sell man-days at a premium — but with few clients and low billing, engagements get compressed. A 7-day engagement gets crammed into 5.

- The report is always due in one day, no matter what we found.

- I'll own this part: my reports suffer because I'm rushed and anxious. (I've taken the advice from this sub to start writing the report as I work — doing that next time.)

**Management behavior:**

- In live meetings, mistakes get met with *"Is this your first time working?"* or *"Do you want me to come do your work for you?"*

- They never actually explain what's wrong. It's always a sarcastic *"why did you do it that way?"* — and sometimes they laugh when I ask questions.

- One time my teammates and I submitted a weak report. As punishment, the team lead made us come write it on-site — office is downtown in a packed area — then told us he'd meet with us, disappeared all day, and left us sitting there with nothing to do.

- Bad report = mandatory commute downtown. That's apparently the policy.

**The only upside** is that the work is hybrid, and honestly I'm no longer sure that's worth it.

The real problem: I keep interviewing and every offer I get is worse than what I have.

Is this normal for the industry, or should I be taking a pay cut to get out?

السوال ده بشوفه كتير فشخ . و موضوع صراحه بيحرق الدم . إن ف عام ٢٠٢٦ الناس معندهاش قدره على شويه research و عايزه تخش مجال كله ريسرش.

عايز نصيحه منى ؟

الكليه حاجه جانبيه. خصوصا ف دوله تعليم فيها ف المجارى زى مصر

خش على LinkedIn و شوف اجمد ناس ف مصر زى احمد سلطان مثلا (خريج صيدليه) و هتعرف ان تعليم مش مهم . عايز تبقى جامد ف بنتست . وفر فلوس الجامعات الخاصه و خد شهادات من

Offsec و HTB

اقسم بالله دول ب اى شهاده جامعيه انت هتاخدها. جمب شهادات دى ابداء حل CTFs . ابدا bug hunting . تبدأ تكتب blogs و writeups

بس كده

الشهاده الجامعه اغلب الناس بتقول

Computer science, mis,or information systems

طبعا يبقى كويس لو دخلت تخصص سايبر سيكورتى بس لو هتعمد عليه بس اعرف انك هتتخرج تشحت .

Flashback ل ٢٠١٥

صحابى مسافرين بره مصر. المسافر المانيا و المسافر اوروبا عمتن و أمريكا و ماليزيا و غير. العبدلله قرر يقعد ف مصر و يسافر لم يخلص دراسته. عدت ١٠ سنين و معرفتش اسافر و بقيت كل يوم بصحى مكتئب. مبقتش طايق حد ف البلد دى. مبقتش طايق نفسى علشان انا مصرى. بقول يارب . يارب ده انا نفيش technical interview الا و عديت فيه . و كل الناس العرتفنى عارفه انى شاطر و حتى لو خيبت ف حاجه او حاجه معرفتهش بروح جرى اذاكرها .

حاليا full time ف شركه . و بدات part time ف شركه تانيه. و شويه بجرب حظى ف bug bounty حاجه كده شبه فرى لانس . بس خلاص . تعبت . تعبت من كتر الجرى وراء فلوس و برضه مش عارف اعمل حاجه . تعبت من كتر ما فى ناس ف امريكا معندهاش نص الskills بتاعتى و شغاله و عايشه احسن منى ميت مره و ممكن تنزل تشترى بيتى و عربيتى و كل حاجه بمرتب شهر.

تعبت من كتر ما بحوش فلوس الطواري بس و مش عارف اعيش حياتى.

احنا منحوسين . احنا و الدول العالم الفقيره . بنحفرك ف اى حاجه و بنجري و بنحاول بس نجيب العمله الصعبه بطلوع الروح . بنافس مع العالم كله . انا مبقتش اقادر اذاكر. مبقتش قادر hunt مبقتش قادر حتى اشتغل. كل حاجه مبقاش ليها طعم. مبقاش ليا نفس اقعد على لابتوب . بعد ما كنا بجيب ثغرات و،بذاكر و حاسس انى أمتلك الدنيا. كل ده ليه؟ مش عارف اسافر. و عيشه هنا حتى لو بتقبض ١٠٠ الف. متسواش حاجه. نفسى اعيش حياتى. تعبت من مذاكره . حتى بجرب اخد اجازه و ارجع اكمل بفضل افكر ف الشغل و ازاى معملتش فلوس كفايه لحد دلوقتى و ازاى مسافرتش و اذاكر ايه علشان اسافر ولا اعمل ايه . و ده مأثر على شغلى بالسلب انى بطلع output وحش من كتر ما انا مبعملش الحاجه بنفس و من كتر الاكتئاب ما بقى مسيطر عليا . طب اضحكم؟ من سنه كان جالى فرصه سفر لبره مصر و رفضتها علشان كنت لسه رايح شركه جديده هنا و فيها تيم شاطر. بعد سنه بظبط الهو دلوقتى يعنى، التيم ده نصه سافر بره مصر . انا حمار. فاكر نفسى زى الاوروبى ولا الامريكى. فاكر اقدر اسافر اى وقت و اى حته. انا نفسى ارتاح من الحياه دى كلها.

و ابوس أيديكم. ابوس ايدكم محدش يقولى ابداء ف مجال ازاى ولا اتنيل اذاكر ايه . مش موضوع البوست .

.

So to cut short. I write terrible reports. I am always in a hurry. Always in rush when writing reports. I only get one or two days maximum after engagements to write a report. I always feel in a rush and my manager is ocd , he focuses on everything. And when something feels off he gets sarcastic and ask questions like "should I do your job instead ?" Or "Is this the first time you working?" . In front of everyone. He is a friendly dude qnd super good yet his comments are always like that.

Anyways he has a huge point about me being sloppy in reports , another thing is that I always get anxious in online meetings , so I always make scenarios and if someone asked me a question I can say I don't know because my mind freezes and I don't know what to say . He hates that and wants me to be more prepared in live discussions.

This started to become more an issue when applying for jobs or doing interviews, In the mid of the interview I feel like I am not worthy of the job, I feel that I am a fraud who is lying and framing myself as a senior in my field when I still have huge flaws like report writing.

I am working on report writing now but I can't shake the feeling , anytime I apply for a job I feel I am not good enough . This reflects in my salary negotiation, I always feel like wow I deserve way less , I am not a good person .