Cloud Infrastructure Penetration Testing:
External penetration testing and security assessments were performed on cloud-hosted infrastructure to identify misconfigurations, exposed services, and attack vectors. Security validation was conducted across externally accessible assets.
Focus Areas:
Cloud Security | External Attack Surface | Configuration Review | Risk Mitigation
External Vulnerability Assessment & Penetration Testing:
External penetration testing of enterprise web applications was conducted to identify exploitable vulnerabilities and security gaps in internet-facing systems. Security controls were validated, attack exposure assessed, and actionable recommendations provided. Focus Areas: Web Security | Attack Surface Analysis | OWASP Testing.
Governance, Risk & Compliance (GRC):
Led and supported ISO/IEC 27001 implementation of security controls and information security management processes within a fintech environment to strengthen governance, risk management, and compliance.
PCI-DSS Compliance Implementation:
Participated in the implementation and alignment of PCI-DSS security requirements for a commercial banking institution to improve payment card data security and compliance readiness.
External Security Assessment – National Cybercrime Centre:
Performed detailed security assessments of external-facing infrastructure and applications for a national cybercrime centre. Identified critical vulnerabilities including SQL Injection (SQLi), Cross-Site Scripting (XSS), and security misconfigurations affecting perimeter defenses. Delivered technical findings and remediation guidance.