Mohammed Adil Baig

Security Analyst

Hawk Sense Business Solutions

Sep 2023 - Present

Working as a Security Analyst performing vulnerability assessment and penetration testing across multiple client environments, including web applications, APIs, mobile applications, network infrastructure, and cloud components. Conducting manual web application penetration testing using Burp Suite to identify application-level vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), authentication bypasses, insecure authorization logic, and improper session handling. Performing API security testing to validate authentication mechanisms, authorization controls, input validation, rate limiting, and data exposure risks. Carrying out network and server vulnerability assessments using Nessus and Nmap, including service discovery, port scanning, and analysis of exposed services. Reviewing cloud configurations to identify security weaknesses related to IAM permissions, access control policies, network exposure, and storage access. Validating and manually verifying findings from automated vulnerability scanners to eliminate false positives and ensure accuracy of reported issues. Assigning severity ratings to identified vulnerabilities using CVSS methodology and classifying findings as Critical, High, Medium, or Low based on impact and exploitability. Preparing detailed vulnerability assessment and penetration testing reports including technical findings, proof-of-concept evidence, risk analysis, and remediation recommendations. Assisting in security review of business solution architectures to identify potential security risks early in the development lifecycle. Coordinating with developers, DevOps teams, and system administrators to support remediation, re-testing, and closure of identified security issues.