Asad

Offensive Security Specialist

Tech6 Solutions • Período integral

Dec 2025 - Present • 10 mos

· Conducted comprehensive Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, Android and iOS mobile applications, and Desktop thick client Application, and Network infrastructure (AD) and cloud environments (AWS). · Performed both manual and automated security testing to identify and validate critical vulnerabilities, including XSS, SQL Injection (SQLi), CSRF, SSRF, and IDOR. · Executed industry-standard security testing methodologies, integrating security controls and best practices throughout the Software Development Life Cycle (SDLC) · Assessed application and API security posture, including authentication, authorization, session management, and business logic flaws. · Conducted security risk assessments, audits, and compliance reviews aligned with ISO/IEC 27001 and NIST standards. · Delivered detailed technical and executive-level VAPT reports, including risk ratings, CVSS scoring, reproduction steps, and remediation guidance. · Provided security awareness and training sessions to development and operations teams, promoting a security-first culture across the organization

Penetration Tester

Arwen Tech • Período integral

Feb 2025 - Dec 2025 • 10 mos

Conducted vulnerability Assessments and Penetration Testing (VAPT) for Web Applications, APIs, Android and IOS Mobile Applications, and cloud environments. Performed manual and automated security testing, identifying and mitigating vulnerabilities including XSS, SQLi, CSRF, SSRF, and IDOR. Executed security testing methodologies and processes, integrating security within SDLC. Provided security training and awareness programs to teams, fostering a security-first culture. Conducted security risk assessments, audits, and compliance reviews aligned with ISO 27001 and NIST standard

Penetration Tester

Tekboox • Período integral

Mar 2023 - Feb 2025 • 1 yr 11 mos

I work as a Penetration Tester at Tekboox, where I focus on securing our own software products. This includes testing web and mobile applications, APIs, and cloud infrastructure for potential security weaknesses. I use various tools and my own Unique techniques and Automation Scripts to find new Security vulnerabilities in every testing. Job Responsibilities: • Conducting in-depth Pentests for Web Applications & APIs. • Conducting in-depth Pentests for Mobile Applications. • Performing Host and Network Penetration Testing. • Cloud Network Infrastructure Penetration Testing including Cloud environments (AWS). • Conduct to Internal Audits with ISO 27001 and HIPPA Compliance. • Creating reports, detailing assessment findings and recommendations. • Experience with scripting and automation (Bash, Python, PowerShell) • Collaborating with Development and DevOps teams to remediate risks and implement secure coding practices.