Sohaib Khalid Email & Phone Number

Lahore, Pk

Responsibilities:- Manage information security projects and lead VAPT and Compliance activities for clients.- Guiding security testing activities covering IoT, ICS, Embedded systems, Web Applications, Desktop Applications, Communication Protocols, and various operating systems- SCADA, DNP3, IEC 60870- Conduct penetration testing to prepare for third-party audits and ensure robust security.- Ensure compliance with various security standards such as NIST SP 800-53, ISO 27001, ISO/IEC 62443 and NERC - CIP.- Coordinate with cross-functional teams to deliver secure, compliant solutions.- Guiding clients to achieve regulatory and safety standards compliance.- Team Management, Mentoring , Monitoring and Evaluation

My job responsibilities in this role were as follows :- Mentoring new team members - Evaluating various products for compliance to various security standards and requirements - Detailed analysis against NIST 800-53, NECR CIP and ISO 27001 standards - Conducted several internal security audits- Helped clients pass several External(third party) security audits- Identified and reported hundreds of security issues- Conducted interviews for new team members In addition, conducted security audits on various products:- Vulnerability Assessments- Penetration Testing - Fuzz Testing - Code Reviews - Code Reverse Engineering - Web Application Security Testing - Desktop Application Testing- Embedded/ IoT security testing- Communication Protocols testing- Wireless Protocol testing - Encryption algorithm analysis - Bruteforce attacks- Man in the middle or on-path attacks- spoofing, tampering and replay attacks

Started Working on a new project involving Smart Grids and Power Flow Control Devices. The End to End system had to be evaluated for cybersecurity before third party audits.Responsibilities:- Setup the penetration testing lab- Evaulated the products against various security requirements - Conducted Security Assessments- Analyzed proprietary communication protocols - Wired and Wireless Packet Capture and Analysis - Performed On path and replay attacks for wired and wireless protocols - Performed vulnerability analysis- Perfomed bruteforce attacks- Performed fuzz testing (Wired and Wireless protocols)- Performed exploitation and penetration testing - Performed dotNet application reverse engineering and modification - Discovered several critical vulnerabilities- Built up a team for internal cybersecurity testing- Mentoring new team members - Evaluating products for compliance to various security standards and requirements - Preparing security documentation

Worked on multiple industrial and safety critical embedded systems projects for European and US clients.Responsibilities:- Extensive Documentation and Verification activities for third party compliance- Our team helped the client acheive compliance to EN 50128 & SIL 3 from EBA and TUV on first attempt.- Worked with EN 50126, EN50127 and EN 50128 functional safery standards and corresponding documentation structure and software processes- V & V activities based on EN 50128- Functional Testing- Software/Hardware Interface Testing- Wireless Communication Testing - Static Code Analysis - Misra C: 2024, PCLint- Prepared white box test scenarios andprocesses.- Verified source code compliance with industrialsafety standards- Executed functional testing on safety andnon-safety features of the software- Functional testing of multiple types of hazardous gas detection products

Worked on a Safety Critical (Safety Integrity Level - 3) product related to Industrial Remote Controls for Cranes and Locomotives. Job Activities included:- Requirements Reviews- Test Case Writing - Test Scripts writing - Functional testing- Regression testing- Static code analysis- Dynamic code analysis- Issue management using JIRA

Bachelor Of Science - Bs, Mechatronics, Robotics, And Automation Engineering

A`Levels, Physics, Chemistry, Maths, Urdu

O`Levels, Physics, Chemistry, Maths, Additional Maths, English