Ghufran Khan, Cyber Security Analyst

Ghufran Khan

Cyber Security Analyst

xBiz Techventures

Lieu
Inde - Mumbai
Éducation
Baccalauréat, Bachelors of Engineering (Computer
Expérience
2 years, 10 Mois

Partager Mon CV

Empêcher usager


Expériences professionnelles

Total des années d'expérience :2 years, 10 Mois

Cyber Security Analyst à xBiz Techventures
  • Inde - Mumbai
  • Je travaille ici depuis octobre 2022

Worked in Banking and Insurance Sector. Conducted Red Teaming assesments and found critical vulnerabilities like SSRF, Payment Tampering etc. Conducted routine assessments and testing to enhance system resilience. Collaborated with teams to streamline critical recurring vulnerabilities, minimizing downtime. Offered expert guidance to management, improving security posture and employee awareness, consequently reducing breaches. Identified risks promptly through regular network assessments. Developed comprehensive incident response plans to ensure minimal disruption during breaches. Provided technical guidance on secure coding practices for compliance. Contributed to the development of attack surface monitoring. Authored a whitepaper on the security of APIs.

Jr. Cybersecurity Analyst à Brightex Solution
  • Inde - Bengaluru
  • juillet 2021 à septembre 2022

Conducted penetration tests on network infrastructure, web applications, and other systems to identify security vulnerabilities. Performed security assessments and risk analysis to proactively identify potential threats and mitigate risks. Collaborated with senior cybersecurity analysts to develop and implement comprehensive security protocols and procedures. Analyzed and interpreted security data from various sources to identify trends and potential security incidents. Assisted in the development and implementation of incident response plans and procedures. Stayed updated on the latest cybersecurity trends, threats, and best practices to ensure the organizations security posture remained robust. Provided support in security awareness training initiatives for employees to enhance overall cybersecurity awareness within the organization. Assisted in the documentation of security processes, procedures, and findings

Éducation

Baccalauréat, Bachelors of Engineering (Computer
  • à Mumbai University
  • février 2022

Specialties & Skills

IT Security
Active Directory
Networks
Penetration Testing
Web Pentesting
Mobile Pentesting
APPLICATION PROGRAMMING INTERFACE (API)
RISK ANALYSIS
SECURITY AWARENESS
INCIDENT RESPONSE
INFRASTRUCTURE
MANAGEMENT
SECURE CODING
WEB APPLICATIONS
NETWORK INFRASTRUCTURE
SOURCE (GAME ENGINE)
Container Security
Code Review
Active Directory Exploitation
API Pentesting
Cloud Audit

Profils Sociaux

Langues

Anglais
Expert
Hindi
Langue Maternelle
Urdu
Expert
Arabe
Débutant

Formation et Diplômes

CEH Practical (Certificat)
Date de la formation:
November 2023
Valide jusqu'à:
November 2026
Cyber Crime Intervention Officer (Certificat)
Date de la formation:
July 2023
Valide jusqu'à:
July 2026
Certified Network Security Practitioner (Certificat)
Date de la formation:
March 2023
Valide jusqu'à:
March 2025
Certified Appsec Practitioner (Certificat)
Date de la formation:
December 2022
Valide jusqu'à:
December 2024
Oracle Cloud Architect Associate (Certificat)
Date de la formation:
September 2023
Valide jusqu'à:
September 2026

Loisirs

  • Bug Bounty, Football, Reading