• performing penetration testing and auditing of various systems.• Conducted testing on web applications, web services (including WCF-based services), Android mobile applications and Networks as well as some infrastructure services.• Developed network penetration testing tools• Collaborated with other team members in automated and manual testing, source code analysis, documentation and reporting, creating security solutions for developers, and describing security vulnerabilities.• Conducted security auditing of processes and applications, ensuring compliance with industry standards and best practices.• Instructed developers on SonarQube utilization to identify and resolve vulnerabilities and bugs, resulting in reduced technical debt.• Setup DefectDojo and integrate it with Jira for Vulnerability Management

• Developed a low level library for exploiting Single Packet Attack (Race Condition on HTTP/2) called H2SpaceX• Developed a Burp Suite extension for pentesting gRPC-Web and published a article at InfoSec with the title: Hacking into gRPC-Web• Designed and implemented Bug Bounty tools by integrating various reconnaissance and subdomain discovery techniques.• Developed a Python and Golang tool for bypassing 403 error using multiple approaches.• Formulated a unique Bug Bounty Hunting methodology that also enhances my penetration testing skills.• Learning Cloud Basics

• Performed code reviews to find web security vulnerabilities• Finding solution for fund vulnerabilities and fixing them• Developed several back-end APls in Python-Flask, Gofiber, Express and very basic knowledge of front-end projects and avoiding possible security vulnerabilities in them. Currently involving with back-endAPI of a project called "Hack0x" which is a small community that I created for sharing useful news, write-ups and notes of Cyber Security and Bug Bounty Hunting to others.• Worked with an industrial company for making some basic tasks of networking in an automated way about 4-6 month as a part time employee