MINHAJ SHAMEER AHAMED

• Conducted Vulnerability Assessment and Penetration Testing (VAPT) on web applications and network infrastructure, performing reconnaissance, service enumeration, and attack surface analysis using tools such as Nmap, WhatWeb, Gobuster, and Burp Suite to identify exposed services and technologies. • Discovered and validated vulnerabilities including SQL Injection, Cross-Site Scripting (XSS), authentication flaws, IDOR, security misconfigurations, and missing security headers through a combination of manual testing and automated scanning. • Simulated real-world attack scenarios by chaining vulnerabilities to demonstrate risks such as account takeover, unauthorized data access, and full application compromise. • Utilized industry-standard tools including Burp Suite, OWASP ZAP, SQLMap, Nuclei, Nikto, and SSL Labs to perform vulnerability discovery, exploitation validation, and security analysis. • Prepared professional penetration testing reports with CVSS-based risk ratings, proof-of-concept exploitation steps, impact analysis, and prioritized remediation recommendations, following methodologies aligned with OWASP Testing Guide, OWASP Top 10, and PTES frameworks.

• Conducted Vulnerability Assessment & Penetration Testing (VAPT) across web applications, internal networks, and mobile applications, aligning with OWASP, PTES, and NIST SP 800-115 methodologies. • Performed reconnaissance, service enumeration, and attack surface analysis using tools such as Nmap, Burp Suite, and Gobuster to identify exposed services and potential entry points. • Identified and validated vulnerabilities including SQL Injection, XSS, authentication flaws, and security misconfigurations, using a combination of manual testing and automated tools. • Simulated real-world attack scenarios by chaining vulnerabilities to demonstrate risks such as account takeover, database exposure, and privilege escalation. • Conducted internal network penetration testing in lab environments, achieving privilege escalation and root-level access on Linux-based systems. • Performed static and dynamic analysis of Android applications to identify insecure data storage, exported components, and permission issues. • Developed detailed penetration testing reports including CVSS scoring, proof-of-concept exploitation, and actionable remediation recommendations.

• Enrolled in a full-time intensive cybersecurity training program covering both offensive and defensive security disciplines, aligned with CEH, CompTIA Security+, and INE eEDA curricula. • Completed extensive hands-on labs across web, network, and system security, performing reconnaissance, vulnerability assessment, and exploitation exercises that simulate real-world attack and defense scenarios. • Developed practical experience with penetration testing tools, ethical hacking techniques, and security methodologies, strengthening skills in APT-style attack analysis, vulnerability discovery, and security best practices. • Participated in Capture-the-Flag (CTF) competitions and security labs to enhance offensive security, problem-solving, and incident analysis capabilities. • Successfully passed APT and Enterprise Defense Administrator (eEDA) examinations through INE Security and currently preparing for CEH and CompTIA Security+ certifications.

• Delivered on-site technical support during a large-scale event, troubleshooting hardware, software, and network connectivity issues for attendees and staff • Diagnosed and resolved endpoint, application, and access-related problems under time-sensitive conditions, ensuring minimal disruption to event operations • Assisted in maintaining stable network and system performance by quickly identifying root causes of technical failures and applying corrective actions • Strengthened incident-handling and communication skills by supporting users in high-pressure, real-time support scenarios

• Developed and deployed a full-stack Hospital Management System using Django and MySQL, handling sensitive healthcare data with secure design principles • Implemented authentication and role-based access control (RBAC) mechanisms to restrict unauthorized access and protect patient information • Designed and integrated CRUD functionalities for patient records, appointments, and medical data with attention to input validation and backend data integrity • Strengthened application security by applying secure coding practices, session handling, and access control enforcement during development • Collaborated in an agile development team to enhance frontend usability while maintaining backend security and performance • Participated in debugging, testing, and documentation, improving application stability and reducing functional and security-related issues • Utilized Git for version control and coordinated updates across the development lifecycle Project: New Life Hospital Management System (NLHospitalSys) A secure full-stack healthcare management platform focused on structured data handling, access control, and operational efficiency GitHub: github.com/mhjshmr/NLHospitalSys

Academic Project: MetaWarden — Metadata Privacy & Risk Analysis Tool Developed a security-focused tool to detect hidden metadata in files and assess privacy exposure risks, strengthening skills in digital forensics, secure application design, and privacy analysis. GitHub: github.com/mhjshmr/MetaWarden