Ammad Khalid Email & Phone Number

Lahore, Punjab, Pakistan

Automating security through integrations for pro-active incident response.

Lahore, Punjab, Pakistan

- Cloud Monitoring Platform Testing: Created a comprehensive test plan and laid the foundation for an automated testing framework for a cloud monitoring platform, ensuring robust and efficient testing procedures.- E-commerce Content Management: Conducted meticulous manual testing for an e-commerce content management platform built upon Adobe AEM, ensuring the seamless functioning of critical website components.- JavaScript Expertise: Acquired expertise in JavaScript for test automation… Show more - Cloud Monitoring Platform Testing: Created a comprehensive test plan and laid the foundation for an automated testing framework for a cloud monitoring platform, ensuring robust and efficient testing procedures.- E-commerce Content Management: Conducted meticulous manual testing for an e-commerce content management platform built upon Adobe AEM, ensuring the seamless functioning of critical website components.- JavaScript Expertise: Acquired expertise in JavaScript for test automation by receiving training in popular testing frameworks, including Cypress, Puppeteer, Playwright, and PactumJS.- Java Proficiency: Gained proficiency in Java for test automation through training in essential tools and frameworks such as Selenium, RestAssured, and Cucumber.- DevOps Training: Received training in DevOps practices, contributing to a holistic understanding of the software development lifecycle and fostering collaboration between development and operations teams. Show less

Lahore, Punjab, Pakistan

Performed research and development efforts in creating advanced social engineering attack detection engines. Streamlined various research projects through automation, significantly increasing productivity and efficiency. Generated innovative project concepts to strengthen cybersecurity capabilities.Key Achievements:- Multi-Product Detection Automation: Automated detection and feature comparison across various firewalls and endpoint detection products. Deployed virtualization… Show more Performed research and development efforts in creating advanced social engineering attack detection engines. Streamlined various research projects through automation, significantly increasing productivity and efficiency. Generated innovative project concepts to strengthen cybersecurity capabilities.Key Achievements:- Multi-Product Detection Automation: Automated detection and feature comparison across various firewalls and endpoint detection products. Deployed virtualization clusters across multiple hardware servers, optimizing attack traffic routing and malicious content containment.- Enhanced Detection Analysis: Improved client network security product detection by analyzing data from multiple sources, uncovering insights, and identifying detection gaps for targeted enhancements.- Cloud-Based Detection Engine: Developed and deployed a cloud-based social engineering attack detection engine on AWS, leveraging fuzzy hash matching for HTML content analysis. - Phishing Detection Optimization: Conducted comprehensive FP/FN testing of phishing detection engines, identifying attack campaigns and mitigating false positives (FP) to enhance accuracy.- URL Analysis Tool: Created a versatile URL analysis tool, utilizing multiple local and third-party detection services to assess URL and domain reputation.- Automation for Knowledge Base: Automated the collection of HTML content from social engineering attack websites to support knowledge base creation.- Image Clustering Solution: Developed an image clustering and labeling tool to strengthen machine learning-based phishing detection engines.- Mobile Attack Data Collection: Automated the collection of data from phishing websites targeting mobile devices using an Android Emulator with Selenium for efficient URL crawling. Show less

Lahore

Developed and executed comprehensive test plans for a network security product, ensuring the quality and reliability of key features.Automated test cases to streamline the testing process, reducing testing time significantly. Efficiently reported, tracked, and verified issues throughout the testing cycle, contributing to faster issue resolution. Collaborated closely with the development team and fellow QA team members to address issues and maintain effective communication within the… Show more Developed and executed comprehensive test plans for a network security product, ensuring the quality and reliability of key features.Automated test cases to streamline the testing process, reducing testing time significantly. Efficiently reported, tracked, and verified issues throughout the testing cycle, contributing to faster issue resolution. Collaborated closely with the development team and fellow QA team members to address issues and maintain effective communication within the team.Key Achievements and Responsibilities:- Protocols & Authentication: Deployed notification receivers across various protocols and implemented user authentication and authorization servers to validate login scenarios for the product.- Memory Leak Detection: Automated Valgrind tests to proactively identify memory leaks across different product processes, enhancing product stability.- Automation Framework: Spearheaded the development of a versatile automation framework, covering Web UI, CLI, and API test cases. Leveraged Selenium for Web UI, Python requests for API testing, and Python Paramiko library for remote CLI testing.Malware Research:- Conducted reverse engineering of Android applications, meticulously analyzing their behavior and network patterns to assess the applications' benign or malicious nature.- Automated repetitive tasks in the analysis of APK files, significantly enhancing efficiency when evaluating a large volume of applications.- Pcaps Creation: Created an automated setup for generating attack pcaps using VMs and automated pcaps creation for download and upload scenarios using tshark and Python requests library.- Rule Development: Wrote custom Snort rules, YARA rules, and established custom domain and hash blacklists/whitelists to enhance detection scenarios. Show less

Master In Computer Science, Computer Science

Final Year Project: - Title: Debugging Malwares to Study their Behavior and Execution - Purpose: Write thesis about overview of current.

Bachelor Of Science (B.Sc.), Mathematics And Physics, First Division