Shafqat Abbas

Experience

• 

  National Center for Cyber Security

  Dec 2021 - Jul 2022

  Cybersecurity Intern

  - Conducted penetration testing and vulnerability assessments on various systems and networks to identify potential security weaknesses and recommend remediation strategies.- Collaborated with deployment team to implement robust security measures, including protective systems and access controls.- Contributed to the development of a comprehensive cyber defense and evaluation system.- Worked on server deployment, virtual machines, hypervisors, and hardening of the servers.- Conducted research on various cybersecurity domains to enhance system security features.- Performed penetration testing using multiple tools to identify and mitigate vulnerabilities.- Automated security processes using scripting languages. - Designed and developed user interface templates to improve user experience.- Prepared detailed technical documentation, including user manuals and system guidelines.- Documented all testing activities, results, and recommendations, ensuring compliance with security standards and facilitating knowledge sharing across teams. Show less

• 

  Sayana Munshi

  Apr 2022 - Jun 2022

  Security Auditor (Pentester)

  - Conducted thorough security testing on the company's web application, utilizing various tools and techniques to identify vulnerabilities and potential risks.- Compiled detailed reports on testing results, including vulnerabilities found, potential impacts, and recommended remediation strategies.- Utilized industry best practices and standards to ensure that the web application met the highest level of security requirements.

• 

  SkyElectric Pvt. Ltd

  Jul 2023 - now

  Cybersecurity Engineer

  - Conducted comprehensive code reviews and implemented security-focused static analysis tools to identify and remediate vulnerabilities in application code, ensuring adherence to industry-standard secure coding practices.- Performed assessments of both internal and external systems, including websites, AWS cloud infrastructure, APIs, and internal networks, to identify potential security gaps, employing advanced security assessment techniques.- Established custom Public Key Infrastructure (PKI) using Hardware Security Modules (HSM) and Trusted Platform Modules (TPM), based on the industrial standards, such as FIPS and NIST.- Executed security audits on Linux and Windows-based servers to ensure compliance with best practices, implementing measures to harden server configurations and mitigate potential security risks effectively.- Prepared detailed cybersecurity reports for management, providing insights into current threats, vulnerabilities, and mitigation strategies, and ensuring informed decision-making for enhancing security measures.- Managed Privileged Access Management operations, including monitoring, controlling, and auditing access to critical systems and resources, significantly enhancing the overall security posture.- Designed and maintained secure CI/CD pipelines, ensuring continuous integration and delivery practices incorporate robust security checks throughout the development lifecycle.- Utilized container orchestration and management techniques to deploy secure, scalable applications, maintaining high availability and integrity of software systems.- Deployed and managed Wazuh (SIEM) and Zabbix (resource monitoring) on a GPU server at a data center, enhancing security monitoring and system performance management, aligned with organizational security requirements. Show less