About
Cybersecurity professional specializing in Vulnerability Assessment and Penetration Testing (VAPT), Offensive Security, and Container Security. Experienced in web application security, OWASP Top 10 and exploitation techniques. Strong expertise in Docker security, container hardening, FIPS compliance, and SBOM analysis. Skilled in building, securing, and deploying container images and automating workflows. Proven ability to collaborate with enterprise clients, deliver technical demonstrations, and resolve real-time production issues.
Skills & Expertise (36)
Work Experience
Cybersecurity Intern
Technohacks Edutech
Jun 2024 - Jul 2024
Gained hands-on experience with cybersecurity tools and vulnerability assessment methodologies. Performed basic web application security testing and learned industry-standard VAPT practices. Worked with tools such as Burp Suite, Nmap, and OWASP ZAP for security analysis. Conducted Android application penetration testing using tools such as APKTool and Drozer, including APK decompilation and vulnerability analysis.
Associate DevSecOps Engineer
CleanStart
Jul 2024 - Present
Implemented secure container hardening practices using STIG guidelines and enterprise security standards. Built and maintained FIPS-compliant Docker images, ensuring compliance across enterprise environments. Designed and automated declarative YAML-based pipelines for Docker image creation, improving consistency and reducing manual effort. Collaborated with MNC clients, delivering live demonstrations on secure deployment and container usage. Provided real-time troubleshooting support and resolved production issues during live client sessions. Gained strong experience in building, securing, and deploying container images at scale. Performed vulnerability assessments and penetration testing on web and containerized applications. Conducted attack surface mapping and identified security gaps across applications. Implemented secure container configurations following STIG compliance practices. Developed automation tools for converting YAML configurations into secure Dockerfiles. Built tools for SBOM comparison and vulnerability analysis. Performed vulnerability scanning using Trivy, Grype, Syft, and Snyk. Conducted infrastructure vulnerability assessments by scanning AWS and GCP instances using Nessus Professional. Scanned system images (ISO files) using Nessus Professional to identify vulnerabilities and misconfigurations. Developed a FIPS compliance checker for container images. Created a Python-based scanner for detecting vulnerable dependencies of Ubuntu Debian Packages.
Education
Bachelor of Engineering (Computer Engineering) - Gandhinagar Institute of Technology
2021 - 2025 · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Availability Details
Visa Status
Citizen
Relocation
Open to Relocation
Skills (36)
Click a skill to find developers with the same skill
