Rida Fatima Khan Email & Phone Number

Pakistan

In my current role, I specialize in developing comprehensive Risk Assessment strategies to safeguard organizational assets across various environments. Also, I joined efforts towards achieving PCI DSS v4.0 compliance for the bank. My responsibilities include overseeing some of the key controls (Encryption, Masking, ASV Scans) to protect Cardholder Data and Sensitive Authentication Data (SAD) to verify security measures.Key Responsibilities:- Conducting comprehensive Vulnerability Assessments and Penetration Testing for a range of technologies, including Web, Mobile, and Desktop applications, Devices, and Containers.- Validating Security Controls through rigorous testing methodologies to ensure resilience against emerging threats.- Performing Architecture Reviews and Source Code Reviews to pinpoint vulnerabilities at their core.- Creating detailed Risk Assessment Reports that offer actionable insights for stakeholders.- Collaborating closely with development teams to mitigate vulnerabilities effectively and strengthen application security.- Leading engagements with multiple stakeholders to complete Risk Assessments, ensuring alignment with organizational risk tolerance and compliance standards.- Performing thorough VA and CIS scans of servers to guarantee secure architecture. Additionally, I contribute to achieving PCI DSS v4.0 compliance for the bank. My role involves managing critical controls such as Encryption, Masking, and ASV Scans to secure Cardholder Data and Sensitive Authentication Data (SAD).

- Contributed to developing internal applications for improving presales processes at PointStar. The application was built in Javascript, HTML5, CSS3, Bootstrap for frontend, and Nodejs for backend. - Use Chrome developers tools for debugging scripts.- Integrated Netsuite with Nodejs using RESTFUL APIs.- Using Javascript design patterns and OOP principles for writing clean and reusable code. - Experience with SQL databases. - Familiar with version-controlling systems such as GIT.- Possess a strong understanding of sales cycles, including Order-to-Cash (O2C) and Procure-to-Pay (P2P) processes.- Familiar with the fundamentals of sales transactions and their impact on business operations.

- Successfully performed initial penetration testing on various web applications, identifying and documenting vulnerabilities. - Utilized a combination of manual and automated techniques to uncover security weaknesses, ensuring robust application security. - Identified and reported security misconfigurations, such as default credentials, open ports, andunnecessary services, highlighting the importance of secure configurations. - Discovered and reported sensitive data exposure vulnerabilities, emphasizing the need for proper data encryption and secure storage practices.

- Developed comprehensive documentation that meets clients' standards. - Maintained clients' internal documentation ticketing system. - Wrote easy-to-understand user interface text, developer guides, and software project reports.

- Worked on a .Net application aimed for sending bulk emails having different email templates.

Master'S Degree, Information Security

Bachelor Of Engineering - Be, Computer Software Engineering