Murad Afandiyev Email & Phone Number

Experienced in web and mobile application security, including secure coding, penetrationtesting, vulnerability assessments, and security design. Proficient in using tools such asBurp Suite, OWASP ZAP, Nmap, Nessus, Nikto, Frida, JADX, Objection etc. to identify,analyze, and mitigate security risks.Proficient in reverse engineering and malware analysis, with hands-on experiencedissecting malicious software to understand its functionality and identify potentialvulnerabilities. Skilled in using tools such as IDA Pro, Ghidra, x64dbg, Binary Ninja,radare2 etc. for static and dynamic analysis of executables, mobile apps, and othercompiled code. Expertise includes uncovering obfuscation techniques, analyzing codeinjection and memory manipulation, and detecting advanced tactics like rootkits andransomware.Skilled in dynamic and static application security testing (DAST, SAST) and manualpenetration testing.Strong background in developing threat models, performing risk assessments, andcreating risk control matrices based on frameworks such as NIST and FFIEC.In-depth understanding of web application vulnerabilities, including DoS, MITM, LFI/RFI,and other common threats. Experienced in security architecture reviews for both web andmobile platforms (iOS/Android).Technical expertise includes scripting and debugging in JavaScript, Python, Java, Golang,and PHP for penetration testing, security automation, and custom exploitationtechniques. Adept in IT infrastructure security, including assessments of LAN/WANtopologies, routers, switches, and firewalls.Active participant in Capture The Flag (CTF) challenges as a member of Qarabag Team,one of the top-ranked teams in the CIS region. Penetration testing mentor at XploitAcademy, where I mentor and train students in ethical hacking and real-worldpenetration testing techniques.

• 

  Ada University

  Computer Science