shaikh Ahmad

Vulnerability Assessment Engineer

Ghaziabad, India 4+ yrs exp 95 · Outstanding

About

Vulnerability Assessment Engineer with 5 years of experience in conducting enterprise-wide vulnerability assessments, asset discovery, risk rating, and remediation validation across web applications and internal infrastructure. Proficient in using Nessus Professional, Tenable One, OpenVAS, and Nmap for scanning, identifying, and prioritizing vulnerabilities based on CVSS scoring and business impact. Skilled in producing detailed assessment reports, tracking remediation through to closure, and collaborating with infrastructure and development teams to reduce organizational risk exposure. Adept at managing scanning lifecycles, consolidating assessment tools, and maintaining vulnerability metrics for senior stakeholder reporting.

Skills & Expertise (25)

vulnerability validation Advanced

8.0/10

Years Exp

service enumeration Advanced

8.0/10

Years Exp

Nessus Professional Advanced

8.0/10

Years Exp

Network Reconnaissance Advanced

8.0/10

Years Exp

Nmap Advanced

8.0/10

Years Exp

Configuration Review Advanced

7.8/10

Years Exp

Patch Validation Advanced

7.5/10

Years Exp

CVSS v3.1 Advanced

7.5/10

Years Exp

Remediation Tracking Advanced

7.5/10

Years Exp

Splunk Advanced

7.5/10

Years Exp

OpenVAS Advanced

7.5/10

Years Exp

CVSS scoring Advanced

7.5/10

Years Exp

False Positive Analysis Advanced

7.5/10

Years Exp

GitHub Advanced

7.0/10

Years Exp

Git Advanced

7.0/10

Years Exp

SQL Advanced

7.0/10

Years Exp

Python Advanced

7.0/10

Years Exp

Azure Advanced

7.0/10

Years Exp

AWS Advanced

7.0/10

Years Exp

LINUX Advanced

7.0/10

Years Exp

Windows Server Advanced

7.0/10

Years Exp

Severity Classification Advanced

7.0/10

Years Exp

Qualys Advanced

7.0/10

Years Exp

Executive Risk Reporting Advanced

7.0/10

Years Exp

WIRESHARK Advanced

7.0/10

Years Exp

Work Experience

Vulnerability Assessment Engineer

Chetu India Pvt. Ltd.

May 2021 - Apr 2026

Conducted 100+ full-scope vulnerability assessment engagements across corporate web applications and internal infrastructure, identifying and documenting 200+ validated security weaknesses with consistent CVSS-based risk scoring. Executed network reconnaissance, service fingerprinting, and vulnerability correlation using Nmap (NSE scripts) and Nessus Professional, identifying misconfigured services, exposed ports, and outdated software versions across 500+ corporate assets. Performed authenticated and unauthenticated vulnerability scans across Windows Server and Linux environments, analyzing scan results to distinguish genuine vulnerabilities from false positives before reporting. Leveraged Tenable One to consolidate vulnerability data from multiple scan sources, correlating findings across asset groups and tracking remediation status through a unified dashboard. Conducted periodic OpenVAS scans as part of a layered assessment strategy, cross-validating findings against Nessus results to ensure comprehensive coverage across the asset inventory.