About
Results-driven Cybersecurity Analyst and VAPT specialist with 2+ years of experience in network administration and technical support. Expert in identifying and mitigating risks using Burp Suite, Metasploit, and Nessus. Proven track record of achieving a 98% issue resolution rate and improving network uptime by 20%. Specialized in API Hacking (CAPIE) and AI Security (CAISR), with hands-on experience across 100+ simulated lab environments.
Skills & Expertise (59)
Work Experience
IT Security Support Technician
RBL Aircon Services
May 2023 - Present
Managed remote and on-site support for 30+ desktops and 10+ peripherals with a 98% resolution rate. Optimized network uptime by 20% through LAN/Wi-Fi router maintenance and configuration. Reduced data loss risks via weekly backups and patch management for 5+ critical systems.
Security Researcher (Independent)
HackerOne
march 2025 - Present
As an independent Security Researcher on the HackerOne platform, I focus on identifying and documenting high-impact vulnerabilities for global organizations. Key Focus Areas: Web & AppSec: Identifying OWASP Top 10 vulnerabilities, including IDOR, Broken Access Control, and API security flaws. Vulnerability Research: Conducted targeted testing on programs such as Vercel and SendGrid to harden their external-facing infrastructure. Technical Reporting: Authoring professional Proof of Concept (PoC) reports detailing exploit vectors and remediation steps for security engineering teams. Reconnaissance: Utilizing advanced scanning and source code analysis to discover sensitive data leaks and exposed API keys. HackerOne Profile: hackerone.com/rahullimbad
Service Engineer
HP World (Checkmate Computers)
Dec 2022 - Mar 2023
Reduced service wait times by 30% for 15+ AMC client accounts. Hardened networks for SMB environments, reducing vulnerability reports by 25%. Improved endpoint security by deploying OS, antivirus, and productivity tools on 50+ systems.
Server Operator
Narola Gems
Feb 2022 - Aug 2022
Operated internal servers for 100+ users, ensuring secure access and uptime. Achieved zero compliance violations through scheduled monthly firmware updates and audits. Improved productivity by 25% by resolving network issues across 3 departments.
Web Developer and Team Leader
Jaldifatafat.com
Aug 2021 - Feb 2022
Developed and deployed 5+ responsive websites using HTML, CSS, and JavaScript, improving client engagement by 35%. Led a development team and implemented structured QA/testing procedures to reduce post-deployment bugs. Established local office infrastructure, including network cabling and firewall configuration, for 10+ staff.
Education
Diploma in Computer Engineering - Viva College of Engineering
- 2021 · Afghanistan
SSC - Saraswati Vidya Mandir High School
- 2017 · Afghanistan
Certifications
Certified Artificial Intelligence Security & Risk (CAISR)
RED TEAM LEADERS · 2026
Earned the Certified Artificial Intelligence Security & Risk (CAISR) credential, validating expertise in securing AI systems. This program, issued by Red Team Leaders, focuses on identifying vulnerabilities and implementing risk management frameworks for AI deployments. Key Competencies: AI-specific threat modeling and vulnerability assessment. Implementation of security controls for LLMs and machine learning pipelines. Governance and ethical risk mitigation.
Foundation Level Threat intelligence Analyst
arcX · 2026
This certification confirms the successful completion of the arcX Cyber Threat Intelligence 101 course and examination. It validates foundational proficiency as a Threat Intelligence Analyst. This credential demonstrates a core understanding of CTI principles and the ability to apply analytical techniques to identify and mitigate cyber threats, as certified by arcX leadership.
CAPIE - Certified API Hacking Expert - Lesson material-certificate
The XSS Rat · 2026
Achieved a deep technical understanding of API security through hands-on labs and theoretical training. This certification validates my expertise in identifying and mitigating the OWASP API Security Top 10 vulnerabilities (including BOLA, Mass Assignment, and Injection attacks). Developed proficiency in using industry-standard tools like Burp Suite, Postman, and cURL to perform authenticated and unauthenticated penetration tests on REST and SOAP architectures.
Ethical Hacker
Cisco · 2025
Cisco verifies the earner of this badge successfully completed the Ethical Hacker course. The holder of this student level credential has a broad understanding of the legal and compliance requirements and is proficient in the art of scoping, executing, reporting vulnerability assessments, and recommending mitigation strategies. The holder has completed up to 34 hands-on activities using Kali Linux, WebSploit, and other tools.
Fortinet Certified Fundamentals Cybersecurity
Fortinet · 2025
The Fortinet Certified Fundamentals in Cybersecurity certification validates that the earner has mastered the technical skills and knowledge that are required for any entry-level job role in cybersecurity. The curriculum covers today’s threat landscape and the fundamentals of cybersecurity.
Fortinet NSE 1 Certified in Cybersecurity
Fortinet · 2025
The NSE 1 in Cybersecurity certification validates that the badge earner has mastered the technical skills and knowledge required for an entry-level role in cybersecurity. The knowledge domain covers today’s threat landscape and the fundamentals of cybersecurity.
Fortinet NSE 2 Certified in Cybersecurity
Fortinet · 2025
The NSE 2 in Cybersecurity certification validates that the badge earner has mastered the technical skills and knowledge that are required to identify and describe the core features of Next Generation Firewalls.
Getting Started in Cybersecurity 3.0
Fortinet · 2025
The Getting Started in Cybersecurity 3.0 badge recognizes a basic understanding of cybersecurity. The badge earner has demonstrated knowledge of cybersecurity terminology and concepts, and has a fundamental understanding of key cybersecurity topics, technologies, and products.
Cyber Security & Ethical hacking
Boston Institute of Analytics · 2025
Introduction to the Threat Landscape 3.0
Fortinet · 2025
The Introduction to the Threat Landscape 3.0 badge recognizes a fundamental understanding of the cyber threat landscape. The badge earner has demonstrated essential knowledge of the threats that endanger computer networks, the cast of bad actors who are behind cyber threats, and the cyber security principles that can keep users and computer networks safe.
Technical Introduction to Cybersecurity 2.0
Fortinet · 2025
The Technical Introduction to Cybersecurity 2.0 badge recognizes expertise in the technical basics of cybersecurity. The badge earner has demonstrated knowledge of essential cybersecurity terminology and concepts, and of the technical foundations for network and endpoint security.
Technical Introduction to Cybersecurity 3.0
Fortinet · 2025
The Technical Introduction to Cybersecurity 3.0 badge recognizes expertise in the technical basics of cybersecurity. The badge earner has demonstrated knowledge of essential cybersecurity terminology and concepts, and of the technical foundations for network and endpoint security.
Interested in this developer?
Profile Score Breakdown
Profile Overview
Availability Details
Current Company
Other
Skills (59)
Click a skill to find developers with the same skill
