Sarwar Barbhuiya Email and Phone Number

Responsibilities: » Conducted Web Application Security (AppSec) Blackbox Testing to identify and mitigate vulnerabilities in various web applications. » Performed Web Application Security (AppSec) Greybox Testing, integrating partial knowledge of the application to enhance security assessments. » Engaged in Vulnerability Assessments (VA), analyzing systems to uncover potential security weaknesses. » Executed Vulnerability Assessment and Penetration Testing (VAPT) to simulate cyber-attacks and evaluate the robustness of security measures. » Utilized Nessus for automated vulnerability scanning and comprehensive security assessments. » Employed Burp Suite for detailed web application security testing, including manual and automated testing methodologies. » Developed and reviewed System Configuration Descriptions (SCD) to ensure accurate and secure system settings.

Given Presentation on: - » Phishing (website cloning and stealing credentials) » Beef-XSS (how to hook browsers and exploit it's vulnerabilities) Trained for: - » Fundamentals of Cyber Security » Ethical hacking: - a) Nmap, Nessus, Burp Suite, Metasploit, Beef-XSS, Wireshark, sqlmap, netcat b) Phishing, SQLI, XSS c) Phases of Ethical Hacking d) Legalities in Ethical Hacking e) Cyber Security Laws » SIEM Tools: - Splunk » GRC: - NIST, CIS, COBIT, PCI DSS, HIPAA, ISO » Basic Cloud Computing: - AWS » VA/PT » Internal Audit