MUSTAQEEM SAHIB
Bengaluru,TG
Summary
Analytical Penetration Tester with over 12 years of hands-on experience in various domains such as security testing and penetration testing. Strong knowledge of network architectures, operating systems and cybersecurity tools. Confident and communicative professional proficient in scripting paired with familiarity of Windows. Collaborative team player committed to working with businesses and organizations to identify and resolve security vulnerabilities and weaknesses affecting digital assets and computer networks.
I've worked for companies that are leaders in the fields of telecom, electric vehicles, pensions, insurance, and assurance domain.
Watchful professional offering comprehensive, hands-on experience identifying, investigating, and responding to information security alerts. Expertise in searching through data-sets to detect threats and anomalies and administering metrics to maintain security processes and controls. Focused on helping businesses safeguard sensitive data from hackers and cyber-criminals.
Wide knowledge in Vulnerability Assessment and Penetration Testing (VAPT) Experience on Web Applications, Mobile Security, Cloud Security, IOT Security and Network Security.
Detail-oriented Security Architect develops testing protocols to assess network vulnerabilities /application security Vulnerabilities. Performs required tests and reports on findings to safeguard company assets and reduce risk.
Cybersecurity Specialist with proficiency in online security research, planning, execution and maintenance. Skilled at training internal users on security procedures and preventive measures.
Ability to communicate technical issues to technical and non-technical business area representatives.
Knowledge in analyzing False positive and False negative report, and Manual Verification.
Overview
11
11
years of professional experience
1
1
Certification
Work History
Technical Lead
Wipro
Bengaluru, KA
04.2022 - Current
- Led team of security architect to successfully deliver high-quality security projects on time.
- Conducted penetration tests regularly to identify vulnerabilities before they could be exploited by malicious actors.
- Analyzing False positive and False negative report, and Manual Verification.
- Vulnerability Assessment and Penetration Testing (VAPT) Experience on Web Applications, Mobile Security, Cloud Security, AWS, IOT Security and Network Security.
- Implemented continuous integration and deployment strategies for faster release cycles and improved application reliability.
- Mentored junior security staff members to develop strong and skilled information security team within organization.
- Ensured compliance with industry standards such as ISO 27001 and GDPR through diligent policy enforcement and audits.
- Analyzed trends in cyber threats to develop proactive countermeasures against emerging attack vectors.
- Collaborated with IT teams to ensure timely application of security patches and updates for all systems.
- Implemented multi-factor authentication solutions to strengthen access control for critical systems.
- Improved overall system stability by identifying weak points in infrastructure and recommending necessary upgrades or replacements.
- Streamlined vulnerability management processes for faster detection and remediation of potential risks.
- Protected sensitive data by establishing access controls, data encryption measures, and secure network architectures.
- Enhanced information security by developing and implementing comprehensive policies, procedures, and training programs.
- Optimized budget allocation for information security projects based on risk prioritization strategies.
- Supported business continuity efforts by ensuring appropriate backup solutions were in place for key systems.
- Coordinated with external vendors to procure cutting-edge cybersecurity tools that enhanced organizational defenses.
- Managed risk assessments to evaluate organization''s exposure to information security threats.
- Developed incident response plans, enabling quick containment and recovery from cyberattacks.
- Increased employee awareness of cyber threats with regular security trainings and informative presentations.
- Led technical upgrade projects for clients by working and coordinating with consultants and developers for integrations.
- Analyzed network security and current infrastructure, assessing areas in need of improvement.
Sr. Associate
Cognizant Technology Services
Bengaluru, KA
10.2020 - 04.2022
- Managed team of 10 security consultants to deliver penetration assignments to clients.
- Experience in Manual and Automation Web application & Mobile Application Penetration Testing.
- Reduced risk of cyber threats for organization by conducting regular security assessments and vulnerability scans.
- Assisted legal department in conducting forensic investigations during security incidents, providing valuable insight into attack vectors and potential vulnerabilities.
- Offered expert advice on selection of hardware and software tools that effectively address organization''s unique security requirements.
- Provided guidance on best practices in cybersecurity, elevating organization''s overall security posture.
- Designed encryption protocols to safeguard sensitive corporate information from unauthorized access or disclosure.
Sr. Security Consultant
Amdocs
Pune, MH
03.2019 - 10.2020
- Enhanced security measures by conducting comprehensive risk assessments and recommending appropriate mitigation strategies.
- Managed team of security professionals, ensuring timely project completion and high-quality deliverables.
- Proactively identified gaps in existing security controls by performing thorough gap analyses and proposing actionable recommendations for improvement.
- Conducted tabletop exercises simulating various cyber attacks scenarios enhancing organizational preparedness while challenging assumptions about existing defenses.
- Coordinated third-party vendor risk assessments ensuring that external partners adhered to established security standards.
- Performed penetration testing to identify potential weaknesses in client systems and recommended remediation actions.
- Implemented multi-factor authentication across client organizations, significantly reducing unauthorized access risks.
- Streamlined incident response processes through development and implementation of standardized protocols and tools.
- Designed secure cloud environments for clients migrating from traditional data centers, addressing unique challenges associated with cloud-based infrastructure.
- Provided expert guidance on cybersecurity best practices, enabling clients to make informed decisions about their security posture.
- Developed tailored security solutions for clients, resulting in improved protection and reduced vulnerabilities.
- Delivered hands-on training to corporate stakeholders on topics such as incident management, threat intelligence, and vulnerability assessment methodologies.
Sr. Security Tester
OTSI, Ericsson, Veon
02.2018 - 03.2019
- Increased product reliability through continuous monitoring of production environments, identifying anomalies indicative of potential issues before impact end users.
- Participated in code review sessions to identify potential vulnerabilities early in development process.
- Reduced project timelines by prioritizing security test cases based on risk assessment and potential impact on endusers.
- Maintained test environment stability by conducting regular maintenance and system upgrades, ensuring accurate testing results.
- Performing Vulnerability Assessment and Penetration Testing (VAPT) Experience on Web Applications, Mobile Security, Cloud Security, AWS, IOT Security and Network Security.
Security Tester & Penetration Tester
Tata Consultancy Services
Bengaluru, KA
11.2012 - 02.2018
- Contributed to cross-functional teams in defining requirements, refining security user stories, and providing input on design decisions.
- Conducted security tests using various tools.
- Documenting all vulnerabilities and providing mitigations.
- Streamlined security testing procedures by implementing automation tools, increasing efficiency in security testing process.
- Improved SDLC quality by designing, developing, and executing comprehensive security test plans and cases.
- Ensured compliance with industry standards by rigorously following established testing methodologies and best practices.
- Managed defect tracking systems effectively, ensuring timely resolution of reported issues while maintaining accurate documentation records.
- Performing Manual and Automation Web application & Mobile Application Penetration Testing.
- Conducted tests and diagnostic procedures using tools such as analyzers, multimeters, and power supplies.
- Hands on experience on different Vulnerability Assessment and Penetration Testing (V.A.P.T.) tools.
Education
BBA - Finance
Veer Narmad South Gujarat University
Bhilad03.2012
High School Diploma -
Vadkun College
Dahanu, Maharashtra03.2009
High School Diploma -
National English High School
Bordi2007
Skills
- Vulnerability Assessment
- Application security
- Penetration Testing
- Compliance Management
- Security Awareness Training
- Identity Management
- Mobile Security
- Threat Intelligence
- Internet of Things Security
- Encryption Technologies
- Cybersecurity Strategy
- Security Information and Event Management
- Security Architecture
- Data Security
- Social Engineering
- Security Code Review
- Cloud Security Testing
- Identity and Authentication
- IoT Security Testing
- Mobile Application Testing
- API Security Testing
- Network Penetration Testing
- Cryptography
- Ethical Hacking Principles
- Penetration Testing Frameworks
- Vulnerability Scanning Tools
- Burpsuite Professional
- OWASP
Certification
- EC Council Certified Security Analyst (E| C.S.A. - From EC-Council)
- Certified Ethical Hacker (C.E.H. - From EC-Council)
- Certified Information Security Manager (C.I.S.M)
Additional Information
- Member of the team which won the “BEST TEAM” award in TCS in 2013 and 2016 and 2017.
- I have been awarded “On the Spot Award” in June 2014, for raised defects with zero rejection in FPIL.
- I have been awarded “Star of the Month” in October 2015 and Feb 2016 for my NFT contribution
- Bravo Award in Amdocs India in Quarter 2
- Project Star Award given by Client in XL-axiata
- Discovered Vulnerability in Nokia received certificate
Timeline
Technical Lead
Wipro
04.2022 - Current
Sr. Associate
Cognizant Technology Services
10.2020 - 04.2022
Sr. Security Consultant
Amdocs
03.2019 - 10.2020
Sr. Security Tester
OTSI, Ericsson, Veon
02.2018 - 03.2019
Security Tester & Penetration Tester
Tata Consultancy Services
11.2012 - 02.2018
BBA - Finance
Veer Narmad South Gujarat University
High School Diploma -
Vadkun College
High School Diploma -
National English High School
- EC Council Certified Security Analyst (E| C.S.A. - From EC-Council)
- Certified Ethical Hacker (C.E.H. - From EC-Council)
- Certified Information Security Manager (C.I.S.M)
Similar Profiles
Deepshikha ChoudharyDeepshikha Choudhary
Technical Lead- Analytics at WiproTechnical Lead- Analytics at Wipro
Tamilselvan PTamilselvan P
Technical Lead at WiproTechnical Lead at Wipro
Pradeep MugasajjiPradeep Mugasajji
Test Engineer at WiproTest Engineer at Wipro