Professional Summary
Cybersecurity expert and web developer with over 6 years of experience in the tech industry. Specialized in ethical hacking, penetration testing, and secure web application development. Passionate educator dedicated to sharing knowledge through tutorials, workshops, and personalized mentoring. Committed to making technology and security accessible to everyone.
Technical Expertise
Networking
Storage Networks, Network Security, Server Networks, IP Protocols, LAN/WAN Switching, Troubleshooting.
Security Assessment
SAST, DAST, VAPT, Open-Source Analysis, OWASP top 10, Mitre ATT&CK Framework, SANS top 25.
Operating Systems
Ubuntu, CentOS, Kali Linux, MacOS, Windows Servers.
Cloud/DevOps Technologies
Docker, CI/CD, Azure, Web Server, AWS Cloud, Python, Bash.
Security & Testing Tools
Snyk, BloodHound, Veracode, Burp Suite, Tenable.io, Nmap, gobuster, ExtraHop, Metasploit, OWASP ZAP, Netsparker, Postman, Wireshark etc.
Work Experience
Angular Developer
2025 - PresentDevaxix.
- Develop and maintain web applications using Angular
- Collaborate with designers to create seamless user experiences
- Implement responsive design and ensure cross-browser compatibility
- Optimize application performance and troubleshoot issues
- Participate in code reviews and contribute to team knowledge sharing
Lead Cybersecurity Educator
2021 - PresentSelf-employed
- Create comprehensive educational content on cybersecurity and web development
- Provide one-on-one mentoring to students and professionals
- Conduct security assessments and penetration testing for clients
- Develop and maintain educational platforms and resources
Application Security Analyst
2021 - 2022Gore Mutual Insurance - Remote
- Conducting source code reviews using Veracode and Snyk, triaging and reporting vulnerabilities, guiding developers with vulnerability remediation.
- Performing automated and manual vulnerability assessments and penetration tests on web applications, networks and infrastructure.
- Conducting focused research on newly identified threats and vulnerabilities.
- Providing recommendations on system patching, hardening of web application and servers to mitigate potential risks.
Application Security Tester
2020 - 2021Saluber MD LLC. - Remote
- Experience with managing an enterprise level SIEM platform.
- Strong understanding of variety of IT systems, applications and configurations.
- Prioritizing and classifying bugs according to severity.
- Familiarity with basic reverse engineering principles.
Education
Bachelor of Business & Information Technology (BBIT)
2023 - PresentVirtual University of Pakistan
Intermediate of Computer Science (ICS)
2020 - 2022Aspire Group of Colleges
Skills
Development
Cybersecurity
Certifications
Google IT Automation with Python Specialization
Google • June 2024
Object Oriented Programming
University of London • April 2024
IBM Full Stack Software Developer
IBM • March 2024
Google IT Support Specialization
Google • October 2023
Google Cybersecurity Specialization
Google • May 2023
Foundations of Operationalizing MITRE ATT&CK
AttackIQ • April 2023
OSCP - Offensive Security Certified Professional
Offensive Security • April 2022
eCPPT - eLearn Security Certified Professional Penetration Tester
eLearn Security • June 2022
ThrowBack Network - AD Pentesting Network
TryHackMe • May 2022
eJPT - eLearn Security Junior Penetration Tester
INE • January 2022
Introduction to Azure Penetration Testing
Altered Security • January 2022
[SC-900] Microsoft Certified: Security, Compliance, and Identity Fundamentals
Microsoft • November 2021
Security Engineering on AWS
Amazon Web Services • October 2021
Cyber Security Essentials
Cisco • June 2021
MacOS for IT Administrators
LinkedIn Learning • May 2020
Notable Projects
Instahack (Security Research on Brute Force Attacks)
Designed and researched a script to simulate brute force attacks to understand how login systems handle security challenges. Focused on developing preventive measures, such as rate limiting, CAPTCHA, and account lockout features to defend against brute force attempts. Ensured the project was conducted in a controlled, ethical environment.
Absolute Enable Right Click & Copy
Developed a browser extension that restores text selection, right-click menus, and copy functionality on websites that restrict these actions. Published on the Chrome Web Store and grew the extension to over 110,000+ users, demonstrating experience in browser APIs, DOM manipulation, and production extension development.
Firewall Bypass VU
Developed a browser extension to improve access to educational resources on Virtual University networks. Integrated browser-level request handling with Cloudflare Workers and D1 to support the extension's backend functionality and deliver a practical solution for students.
Instahack (Security Research on Brute Force Attacks)
Designed a controlled security research tool to study brute-force attack patterns and evaluate authentication defenses. Explored protective measures including rate limiting, CAPTCHA challenges, and account lockout policies in an ethical testing environment.
Acadora — Virtual University Student Platform
Built a student-focused learning platform that brings study materials, handouts, notes, academic calendars, reviews, and MCQ-based exam preparation into one application. Integrated a structured academic content API and a Supabase-backed question bank to simplify access to learning resources.
Noor Al-Qalb — Islamic Companion App
Developed a cross-platform Islamic application focused on daily worship and learning. Worked on prayer-time calculations, adhkar content, and a data-driven architecture designed to provide users with accessible religious resources and a consistent mobile experience.
DarkPDF
Developed a browser extension focused on improving PDF readability through a dark viewing experience. Designed the extension to integrate with browser-based document workflows and provide a more comfortable interface for reading digital documents.