غفران خان, Cyber Security Analyst

غفران خان

Cyber Security Analyst

xBiz Techventures

البلد
الهند - مومباي
التعليم
بكالوريوس, Bachelors of Engineering (Computer
الخبرات
2 years, 11 أشهر

مشاركة سيرتي الذاتية

حظر المستخدم


الخبرة العملية

مجموع سنوات الخبرة :2 years, 11 أشهر

Cyber Security Analyst في xBiz Techventures
  • الهند - مومباي
  • أشغل هذه الوظيفة منذ أكتوبر 2022

Worked in Banking and Insurance Sector. Conducted Red Teaming assesments and found critical vulnerabilities like SSRF, Payment Tampering etc. Conducted routine assessments and testing to enhance system resilience. Collaborated with teams to streamline critical recurring vulnerabilities, minimizing downtime. Offered expert guidance to management, improving security posture and employee awareness, consequently reducing breaches. Identified risks promptly through regular network assessments. Developed comprehensive incident response plans to ensure minimal disruption during breaches. Provided technical guidance on secure coding practices for compliance. Contributed to the development of attack surface monitoring. Authored a whitepaper on the security of APIs.

Jr. Cybersecurity Analyst في Brightex Solution
  • الهند - بنغالورو
  • يوليو 2021 إلى سبتمبر 2022

Conducted penetration tests on network infrastructure, web applications, and other systems to identify security vulnerabilities. Performed security assessments and risk analysis to proactively identify potential threats and mitigate risks. Collaborated with senior cybersecurity analysts to develop and implement comprehensive security protocols and procedures. Analyzed and interpreted security data from various sources to identify trends and potential security incidents. Assisted in the development and implementation of incident response plans and procedures. Stayed updated on the latest cybersecurity trends, threats, and best practices to ensure the organizations security posture remained robust. Provided support in security awareness training initiatives for employees to enhance overall cybersecurity awareness within the organization. Assisted in the documentation of security processes, procedures, and findings

الخلفية التعليمية

بكالوريوس, Bachelors of Engineering (Computer
  • في Mumbai University
  • فبراير 2022

Specialties & Skills

IT Security
Active Directory
Networks
Penetration Testing
Web Pentesting
Mobile Pentesting
APPLICATION PROGRAMMING INTERFACE (API)
RISK ANALYSIS
SECURITY AWARENESS
INCIDENT RESPONSE
INFRASTRUCTURE
MANAGEMENT
SECURE CODING
WEB APPLICATIONS
NETWORK INFRASTRUCTURE
SOURCE (GAME ENGINE)
Container Security
Code Review
Active Directory Exploitation
API Pentesting
Cloud Audit

حسابات مواقع التواصل الاجتماعي

اللغات

الانجليزية
متمرّس
الهندية
اللغة الأم
الأوردو
متمرّس
العربية
مبتدئ

التدريب و الشهادات

CEH Practical (الشهادة)
تاريخ الدورة:
November 2023
صالحة لغاية:
November 2026
Cyber Crime Intervention Officer (الشهادة)
تاريخ الدورة:
July 2023
صالحة لغاية:
July 2026
Certified Network Security Practitioner (الشهادة)
تاريخ الدورة:
March 2023
صالحة لغاية:
March 2025
Certified Appsec Practitioner (الشهادة)
تاريخ الدورة:
December 2022
صالحة لغاية:
December 2024
Oracle Cloud Architect Associate (الشهادة)
تاريخ الدورة:
September 2023
صالحة لغاية:
September 2026

الهوايات

  • Bug Bounty, Football, Reading