About
Cybersecurity professional with experience in application security focusing on web application security, API security, Android application security and source code security analysis. Currently working as an Information Security Consultant since December 2024, performing security assessments to identify vulnerabilities in applications and supporting development teams with remediation aligned with OWASP security standards. Experienced in analyzing application logic, authentication mechanisms, API security controls, and insecure coding practices to improve overall security posture.
Skills & Expertise (14)
Work Experience
Information Security Consultant
AAA Technologies Ltd
Dec 2024 - Present
Identified vulnerabilities (CVSS 8.0+) across 100+ NIC applications through manual VAPT. Conducted Vulnerability Assessment and Penetration Testing (VAPT) for web applications, Android applications, and APIs environments and to identify vulnerabilities and security weaknesses. Detected critical flaws in PNB and NIC environment enabling immediate risk mitigation. Evaluated authentication workflows, session management, and API access controls to ensure secure implementation. Delivered 100+ audit reports including CVSS risk scoring, PoC and remediation guidance for development teams. Collaborated with developers to implement secure coding practices aligned with OWASP security standards. Reduced false positives through manual validation of automated scan results.
Education
B.Tech (Computer Science and Engineering) - Dronacharya Group Of Institutions
2019 - 2023 · Afghanistan
Certifications
No certifications added yet
