Umar Siddiqui

Senior Cyber SecurityConsultant at Rewterz

• Saudi Arabia - Riyadh
• My current job since July 2022

-Conducting in-depth VAPT(Vulnerability Assessment and Penetration Testing) across web,
mobile, and API platforms, thoroughly addressing OWASP Top 10 vulnerabilities, identifying
business logic flaws, and expertly leveraging application scenarios to uncover potential attack
vectors. Prioritizing risks based on business impact to ensure proactive and impactful security
measures.
-Formulating yearly security plans aligned with SAMA CSF, SAMA ITGF, NCA CSCC, NCA ECC, and
PCI-DSS, ensuring compliance and proactive risk management.
-Collaborating effectively with IT teams to prioritize and remediate vulnerabilities within
established timeframes, exceeding client expectations for responsiveness and resolution.
-Demonstrating expertise in OS-level attacks and various security assessment tools (Core
Impact, Tenable SC, Nessus, Nmap, Metasploit, Acunetix, Appscan, Splunk, QRadar, Volatility,
Hydra, BurpSuite, SonarQube, SQLMap, Fortify) to comprehensively assess and mitigate risks.
-Conducting rigorous network and server configuration reviews for all appliances, adhering to
NIST and CIS benchmarks, or crafting customized Minimum Baseline Security Standards (MBSS)
leveraging whitepapers for non-standard devices, to fortify infrastructure security and minimize
attack surfaces.
-Conducting SIEM audits, threat hunting, and source code reviews to identify integration
issues, potential threats, and codebase vulnerabilities.
-Possess strong communication and interpersonal skills, fostering collaboration and ensuring
effective communication with cross-functional teams during assessments and remediation
efforts.

Bug Bounty Hunter at Freelance

• Pakistan - Karachi
• My current job since June 2018

To perform VAPT activities which include: Hunting for OWASP Top 10 over at Web Applications and Mobile Applications which include the use of Tools(Nmap, Metasploit, Nexpose, Nessus, Burp, Hydra, and more.)

Cyber Security Consultant at Rewterz

• Saudi Arabia - Riyadh
• July 2022 to June 2023

Cyber Security Associate at Pwc - Pakistan

• Pakistan - Karachi
• June 2021 to June 2022

-Perform Threat Hunting Activities to look out for Malicious Actors. Activities include: Hunting for Actors at SIEM(Splunk/Q Radar), Performing thorough Memory Analysis(Volatility), and Searching for any Indicators over at Endpoints.

-To perform VAPT activities which include: Hunting for OWASP Top 10 over at Web Applications and Mobile Applications which include the use of Tools(Nmap, Metasploit, Nexpose, Nessus, Burp, Hydra, and more.)

-Perform ATM Testing in order to look out for any potential malware over at the Critical Endpoint

-To carry out SIEM Audits in order to identify any issues in the integration of SIEM.