Zeeshan Ajmal

Experience

• 

  National Development Complex (NDC)

  Jun 2010 - Aug 2010

  Internship Trainee

  Worked on the enhancement of mobile phone Wireless communication in GSM to improve the signal strength.

• 

  National Telecommunication Corporation

  Jul 2011 - Nov 2011

  Internee

  I worked on the Optical Fiber Access Network (OFAN) and the operation of ZTE MSAN ZXA10, a dual-ring and token ring network system that was controlling the traffic of the North Region of Pakistan. I worked in the SOC (Security Operation Center) and Network Monitoring System (NMS) of NTC to monitor and evaluate the security controls.

• 

  Pakistan Telecommunication Authority (PTA)

  Nov 2011 - Nov 2012

  Management Trainee Officer

  I worked on GRC (Governance, Risk, and Compliance) policy-making for Telco companies and vendors in Pakistan. I also assisted the Deputy Director in the implementation of ISO standards and the Information security standards framework to be implemented in the Pakistan telecommunications industry. I also implemented the guidelines in issuing the NOCs for all the telecommunication devices authorized to work in Pakistan as per FAB (Frequency Allocation Board) and FIA (Cybersecurity act).

• 

  Tier4

  Dec 2012 - Apr 2015

  I implemented the QHSE standards for Microwave link installation for 3G and 4G services for vendors Huawei and ZTE and worked with Huwaei teams to improve the cyber security and information security programs for subcontractors and employees. I managed the implementation of HSE standards in the organization to ensure a Risk-Free working environment for all employees.I also developed the HSE Policy for the Technical and administration staff and assisted facilities in complying with all safety & health regulation, and company guidelines. I enforced & trained all employees in the department to follow safety requirements as per approved HSE policies & procedures and implemented work permit systems and inspections, planning safety arrangements for Erection work. Show less As HUAWEI's certified 3G Expansion Engineer, I worked on multiple projects for the installation of 3G and 4G microwave systems, BSS upgradation, media expansion projects, network security, and quality assurance. A brief details of the equipment and projects on which I worked:. Installation of Huawei RTN 610, 620, 910, 950, 980 series Microwave links.. Commissioning and Troubleshooting of Huawei RTN 610, 620, 910, 950, 980 series Microwave links.. Performed Media Expansion, new site media clearance and 2nd E1 expansions.. End to End Media clearance and Troubleshooting.. Perform traffic shifting and cutover activities.. Installation and integration of Rectifier and Battery Bank.. Installation and commissioning of Huawei BTS 3900 (DBS).. Alarms Trouble Shooting & Power Test.. Alarm verification and Rectification in coordination with OMC. (Power alarms, Gen Set alarms, Environmental alarms).. Performed BTS and Power cutover activities (Shifting Site from Old equipment to new equipment).. Performed Pre-ATP and ATP (Acceptance Test Procedure). Show less

  • Cyber Security & HSE Engineer

    Aug 2014 - Apr 2015

  • Telecommunications Engineer

    Dec 2012 - Jul 2014
• 

  Turnotech Inc.

  Apr 2015 - Nov 2015

  Telecommunications & HSE Coordinator

  During my tenure in Turnotehc, as a HSE coordinator I was responsible for assisting with developing HSE Plans that comply with Company policies and procedures as well as local client requirements, conducting HSE presentations and training to employees as required, assisting work site personnel and line management in development of work site HSE.

• 

  SRACO COMPANY

  Dec 2015 - May 2023

  Risk Analysis Engineer

  In my role as an Risk Analysis Engineer, I was working at Royal Commission Hospital in Jubail. I conducted comprehensive risk assessments and data analysis using Power BI, implemented and enforced safety management systems, trained staff on compliance and global safety programs.I also led security and risk management initiatives, ensuring adherence to local regulatory legislation and performed FMEA and Root Cause Analysis to enhance system reliability and security.

• 

  TryHackMe

  Jun 2022 - Jun 2024

  CTF Player

  I am learning the skills to detect and prevent cyber attacks, penetration testing, web security and application security.- Vulnerability Scanning, Enumeration and Exploitation - Privilege Escalation (Linux, Active Directory) - Web App Testing- Pentesting Tools: Nmap, FFUF, Nessus, Metasploit Framework, Hydra, Burp Suite

• 

  ENGIE Solutions Middle East

  May 2023 - Aug 2023

  Data Center Security Engineer

  I worked on the KACE and KAUST data centers located in King Abdullah Economic city (Jeddah). The data centers were for NCB (National Commercial Bank) and King Abdullah University. My responsibilities included:- Cloud Environment Management: Managed and secured AWS-based data center environments, ensuring compliance with industry standards and security best practices.- Automation and CI/CD: Developed and maintained CI/CD pipelines, automating deployment processes to increase efficiency and reduce manual errors.- Security Implementation: Applied security tools to scan and analyze vulnerabilities, maintaining secure infrastructure configurations. Show less

• 

  Bugcrowd

  Dec 2023 - Aug 2024

  Security Researcher

  As a freelance security researcher with Bugcrowd, I specialize in identifying and mitigating security vulnerabilities for a diverse range of clients. I perform security audits and penetration testing to unearth vulnerabilities in applications and infrastructure, contributing to the fortification of client cybersecurity defenses. I also engage in an active community of security professionals, sharing insights and techniques to continuously improve collective knowledge and efficacy in tackling security challenges. Show less

• 

  HackerOne

  Dec 2023 - Aug 2024

  Ethical Hacker

  I am working as a freelancer in the following areas:- Penetration Testing: Executed in-depth penetration tests on various applications, identifying and mitigating security vulnerabilities as part of a proactive security strategy.- Secure Software Development: Applied principles of the Secure Software Development Life Cycle (SSDLC) to improve application security and reduce risks.

• 

  University of Oulu

  Jun 2024 - Aug 2024

  Research Intern

  In this role, I focused on the intersection of Artificial Intelligence and Cyber Security, applying data mining techniques to analyze Q&A repositories with the aim of understanding challenges related to quantum computing and its security implications. My work involved leveraging AI-driven data analysis to uncover patterns and insights from complex datasets.