About
Security professional with hands-on experience across VAPT and SOC-focused work — reviewing system, network, and firewall activity for suspicious behavior, identifying vulnerabilities, and documenting findings in structured, client-ready reports. Solid grounding in networking (TCP/IP, DNS, HTTP), Linux/Windows systems, and common threat types (malware, phishing, injection, access-control abuse), reinforced by designing SOC Analyst training covering SIEM fundamentals, alert triage/prioritization, MITRE ATT&CK, and log monitoring. Experience with AWS cloud security tooling (GuardDuty, CloudTrail, Security Hub) for detecting misconfigurations and policy violations. Comfortable working with IT/dev teams to implement fixes and controls. Basic scripting in Python; pursuing eJPT certification.
Skills & Expertise (33)
Work Experience
Security Engineer – VAPT
Cybernerds Solutions Pvt Ltd
Dec 2024 - Present
Reviewed application, API, and network behavior to identify suspicious activity and validate vulnerabilities — including authentication bypass, injection flaws, and access-control issues — across 30+ engagements. Used Burp Suite, OWASP ZAP, Nmap, and Nessus for manual and automated security checks aligned with OWASP Top 10, supporting incident investigation and root-cause analysis. Documented findings in structured, client-ready reports with risk ratings, evidence, and remediation guidance; tracked issues through closure. Worked directly with development and infrastructure teams to explain findings and implement security controls and fixes; performed retesting to confirm resolution. Built automated AWS cloud security alerting and compliance workflows (GuardDuty, CloudTrail, Security Hub, Prowler) to detect policy violations and misconfigurations in near real-time. Designed SOC-focused technical training covering SIEM platforms, alert triage and prioritization, MITRE ATT&CK, Windows/Linux log monitoring, and incident response workflows — including a 52-slide SIEM fundamentals deck and a 30-slide alert-triage deck.
Education
B.Tech, Information Technology - Nandha Engineering College
2020 - 2024 · Afghanistan
Certifications
AWS Certified Cloud Computing
· 2021
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (33)
Click a skill to find developers with the same skill
