Fahad Ahmed

Penetration Testing:

1. Performing routine vulnerability scans against systems, analyzing the results, and working with business units to remediate the system.
2. Hands-on experience conducting Penetration testing manually and using automated tools.
3. Hands-on experience conducting vulnerability scans.
4. Performing dynamic and static analysis of web applications.
5. Performing Android and IOS application testing.
6. Explained to multiple clients the root cause of vulnerabilities and recommended secure solutions and mitigations.
7. Analyze systems for vulnerabilities that may result in improper system configuration, hardware or software flaws, or operations.
8. Ability to analyze source code (secure code review).
9. Conducted white/gray box penetration testing on the financial systems.
10. Worked with development teams to implement security controls based on threat model findings
11. Ability to test thick client applications.
12. Ability to communicate and work closely with executives, peers, and employees at all levels.
13. Understanding of Application Security Concepts such as SAST, DAST

GRC:

1. Perform information security assessment and consulting with respect to CIS top 18 Controls.
2. Performed information security GAP assessment and consulting as per ISO-27001 security controls. Defined risks against lack of identified controls. Recommended mitigations against identified observations to maintain ISO-27001 Compliance. Technologies used: ISO-27001 |PwC Internal Work Programs. 
3. Technical Review of Windows, Linux and Databases. Technologies used: CIS Best Practices |PwC Internal Work Programs. 
4. Conceptual understanding or experience performing Risk Assessments against industry frameworks.