Accomplished Cyber Security Specialist with over 13+ years of extensive experience in the field of cyber security. Proficient in conducting hands-on assessments encompassing Web & Mobile Applications, as well as Network & Infrastructure Penetration Testing. Adept at analyzing cyber threats, conducting in-depth incident investigations, and evaluating vulnerabilities and potential risks to safeguard the integrity of organizational applications, systems, and networks. Recognized for delivering strategic recommendations for effective remediation and implementing proactive workarounds to mitigate risks efficiently.Cyber Security Consultant of Sehat Sahulat Program, Benazir Income Support Program, First Pakistan Digital Census, ABM infotech group, Scorpbit technologies, GAP Dynamics and various Defense Projects. Consulted with both government and private sector entities, including large enterprise networks, on a range of critical areas including Vulnerability Assessment and Penetration Testing (VAPT), Threat Intelligence, Security Operations Centers (SOC), as well as Offensive and Operational Security strategies.Pentest & Red teaming expert on Enterprise Systems (Tablets, BVS Devices, Wireless Networks, Tablets, MDM, Active Directory, Email Systems etc.). Managed Organization Wide Vulnerability Assessment & Standard Compliance (ISO-270001, PCI-DSS) programs. Delivered various international penetration testing & red teaming projects.Evaluated the security of mobile applications across multiple platforms (iOS, Android) by conducting penetrationPerformed security assessments of cloud infrastructure and services (e.g., AWS, Azure, Google Cloud) to identify misconfigurations, insecure interfaces, and other potential security issues. Implemented best practices for securing cloud environments and advised on proper configuration settings to enhance overall security posture.Conducted thorough assessments of APIs to identify security vulnerabilities such as injection attacks, broken authentication, and insufficient authorization controls. Utilized specialized tools and techniques to test API endpoints and ensure secure data transmission and access control.Collaborated with development teams to review architectural designs and provide security guidance throughout the software development lifecycle. Conducted thorough assessments to identify design flaws and potential security risksPerformed penetration testing of Active Directory to identify weaknesses in authentication mechanisms, privilege escalation opportunities, and potential avenues.