SH Robin

Senior Information Security Analyst

Dhaka Bank PLC. • Período integral

Oct 2025 - Present • 7 mos

Working as a Senior Information Security Analyst in a leading private bank, responsible for securing critical systems and applications against real-world threats. Conduct regular Vulnerability Assessment and Penetration Testing (VAPT) on web applications and APIs based on OWASP standards. Monitor and analyze security events using SIEM solutions (Wazuh, Elasticsearch, Kibana) for threat detection and incident response. Perform API and application security testing, risk assessment, and security monitoring to ensure system integrity and compliance. Collaborate with teams to identify vulnerabilities and implement practical remediation to strengthen overall security posture.

Information Security Specialist

Mercantile Bank PLC. • Período integral

Feb 2019 - Oct 2025 • 6 yrs 8 mos

Worked as an Information Security Specialist in a private banking environment, supporting the security of applications and systems against real-world threats. Performed Vulnerability Assessment and Penetration Testing (VAPT) on web applications, APIs, and network infrastructure following OWASP standards. Assisted in security monitoring and incident response activities using SIEM tools, contributing to threat detection and analysis. Conducted API and application security testing, risk assessment, and supported implementation of security controls and best practices.

Team Leader & Technology Analysts

OPPTECHBD • Período integral

Aug 2018 - Jan 2019 • 5 mos

Worked as a Team Leader and Technology Analyst, contributing to software development and security improvements. Led system enhancements and proposed new features, ensuring secure design and implementation. Performed security testing and code reviews to identify vulnerabilities and improve application security. Collaborated with development teams on secure coding practices and maintained technical documentation. Researched advanced software security techniques and best practices to strengthen overall system security.