About
I am a dedicated and skilled Senior Security Engineer with 4+ years of experience specializing in web application penetration testing, network penetration testing, mobile application pentesting, API testing, source code review and vulnerability management. Experienced in identifying critical vulnerabilities including SQL Injection, LFI, IDOR, authentication bypass, and XSS across enterprise applications. Conducted 60+ penetration tests across web applications, mobile applications, APIs and source code review. My expertise lies in I have a proven track record of identifying vulnerabilities and submitting them responsibly, earning recognition through Hall of Fame awards. With strong technical skills, leadership abilities and a passion for continuous learning. I am committed to supporting organizations in achieving their security objectives.
Skills & Expertise (18)
Work Experience
Senior Security Engineer
Happiest Minds Technologies
Apr 2025 - Apr 2026
Performed web application and API penetration testing across internal enterprise applications. Identified vulnerabilities including authentication bypass, injection flaws, and insecure API endpoints. Conducted secure code reviews and API security assessments before production release. Delivered detailed penetration testing reports with remediation guidance to development teams. Managed and fulfilled RITMs (Requested Items) in ServiceNow portal resolution of user service requests according to SLAs. Assessed network infrastructure and system security to identify potential attack vectors.
Security Analyst
Meditab Software Pvt. Ltd.
Apr 2024 - Apr 2025
Monitored security access logs and analyzed system events for suspicious activity. Identified potential security risks, vulnerabilities and threats to the organization's systems and networks. Conducted web application penetration tests for internal applications, clients, including healthcare. Executed vulnerability assessments and penetration tests using industry-standard methods. Identified weaknesses in network infrastructure, systems, and applications. Conducted mobile application testing of android and iOS. Also performed source code review and API testing. Prepared detailed reports on penetration testing, highlighting vulnerabilities and recommending ways to improve security.
Security Analyst
TechDefence Labs
Jan 2022 - Apr 2024
Conducted web application penetration tests for clients, including banks, healthcare, stock brokering, and transportation sectors. Collaborated closely with clients to understand their security requirements. Executed vulnerability assessments and penetration tests using industry-standard methods. Analyzed security findings with the team and provided suggestions for fixing issues. Identified weaknesses in network infrastructure, systems, and applications. Conducted mobile application testing of android and iOS. Also performed source code review and API testing. Conducted thorough testing to find and address security vulnerabilities. Prepared detailed reports on penetration testing, highlighting vulnerabilities and recommending ways to improve security. Provided training and mentorship to new interns, sharing cybersecurity knowledge and best practices.
Back Office Executive
Monarch Networth Capital Ltd
Jul 2017 - Jul 2019
Prepared and processed client documents for submission to stock exchanges (NSE, BSE, MCX, NCDEX). Created and managed Computer to Computer Link (CTCL) terminals for clients, enabling seamless trading operations.
Education
Master of Science in Cyber security and digital forensics
2020 - 2022 · Afghanistan
Post Graduate Diploma in Computer Application
2019 - 2020 · Afghanistan
Master of Commerce, M.com
2016 - 2018 · Afghanistan
Bachelor of Commerce, BCom
2013 - 2016 · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (18)
Click a skill to find developers with the same skill