About
Cybersecurity professional with experience in vulnerability management, container security, application security, and threat investigation. Skilled in identifying, prioritizing, and remediating security vulnerabilities across containerized and cloud-hosted applications using Prisma Cloud, Qualys, ArmorCode, and GitHub integrations. Experienced in vulnerability remediation, risk assessment, security governance, and remediation tracking, with additional expertise in threat intelligence, phishing analysis, and digital risk protection.
Skills & Expertise (16)
Work Experience
Cyber Security Analyst – Vulnerability Management
Infosys BPM
Oct 2025 - Present
Performed vulnerability assessment and remediation activities across containerized and cloud-native applications using Prisma Cloud Compute. Identified, analyzed, and prioritized security findings from SAST, container security, and cloud security assessments. Implemented secure code changes and deployment activities to remediate container security vulnerabilities identified through Prisma Cloud assessments. Utilized ArmorCode to aggregate, correlate, prioritize, and track vulnerabilities from multiple security tools through a centralized risk management dashboard. Implemented and maintained integrations between GitHub repositories, Prisma Cloud, Git Secret Scan, and Qualys using ArmorCode, enabling centralized vulnerability aggregation, risk-based prioritization, and remediation tracking. Conducted vulnerability analysis and remediation tracking for Qualys WAS findings and application security issues. Assisted in vulnerability prioritization using risk scores, exploitability, business impact, and asset criticality. Developed security documentation, remediation workflows, operational runbooks, and security baselines to standardize vulnerability management processes. Provided mitigation strategies and compensating controls for vulnerabilities lacking vendor fixes or immediate remediation options. Leveraged Claude AI-assisted development workflows to create automation scripts supporting vulnerability owner mapping and remediation management processes.
Platform Operations Specialist- Brand Protection
ZeroFox Holdings, Inc
Jun 2023 - Aug 2025
Monitored online platforms including websites, social media, app stores, code repositories for brand impersonation, copyright infringement, and trademark/IP violations. Investigated and confirmed threats such as phishing domains, fake profiles, leaked data(PII), and unauthorized use of brand assets. Initiated and tracked takedown requests by reporting infringing content to platforms, registrars, and hosting providers. Conducted in-depth research on malicious campaigns targeting high-profile brands using OSINT tools and internal systems. Continuously updated workflows and SOPs to improve detection and enforcement efficiency in alignment with evolving threat patterns. Analyzed email headers, sender details, and body of the mail, analyzed the intention of attacker, documented relevant data, created initial reports, and escalated complex cases to L2 analysts for remediation. Took preventive measures to block sender mail addresses globally. Responded to customer queries and enforcement-related requests through Zendesk ticketing system, ensuring timely updates, issue resolution, and clear communication on takedown status and brand protection actions.
Education
Bachelor of Engineering in Computer Science with Honors - SJB Institute of Technology
- 2023 · Afghanistan
Pre-University Education; 12th standard - Science Academy
- 2019 · Afghanistan
Certifications
Comptia Security+
Comptia · 2025
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (16)
Click a skill to find developers with the same skill