Muhammad Khan

Penetration Testing & Bug Bounty • Conducted penetration testing on web applications (OWASP WSTG) and mobile applications (OWASP MSTG). • Performed security assessments on Docker, AWS, and Kubernetes environments. • Implemented and validated bug bounty findings, reproducing exploits to confirm impact and remediation. Red Team Operations & Adversary Emulation • Executed red team engagements on Active Directory, aligned with MITRE ATT&CK tactics (Reconnaissance → Initial Access → Execution → Persistence → Privilege Escalation → Credential Access → Lateral Movement → Exfiltration). • Simulated adversary techniques against AWS services (IAM, EC2, S3, ROSA, EKS, Lambda) to identify misconfigurations and gaps. Application Security • Reviewed and validated developer-implemented mitigations, ensuring secure SDLC practices. • Defined security verification requirements for production releases. • Implemented SAST tools (SonarQube, Snyk, Semgrep, MobSF) to identify vulnerabilities in CI/CD pipelines. • Performed DAST scanning on new product releases to uncover runtime security flaws.

Led 50+ web/mobile/API and internal network tests under PTES/NIST 800-115; mapped findings to OWASP Top 10 and MITRE ATT&CK and drove re-tests to closure. Ran vulnerability management across on-prem/cloud with Nessus/Qualys; triaged by CVSS, set SLAs, and tracked remediation with engineering/IT. Executed grey/black-box exploitation using Burp Suite, Nmap (NSE), SQLMap, and custom Python/Bash on Kali Linux; uncovered IDOR, auth bypass, crypto, and logic flaws. Conducted adversary emulation with Cobalt Strike and traffic analysis in Wireshark; documented lateral-movement paths and recommended segmentation/IDS/EDR controls. Assessed AWS and APIs against OWASP API Top 10; identified misconfigurations, hardened cloud perimeters, and improved data-pipeline security.

Led web & API penetration tests under PTES/NIST 800-115 using a Kali Linux toolchain (Burp Suite, OWASP ZAP); uncovered OWASP Top 10 issues and validated fixes. Executed internal network and Active Directory assessments; mapped attack paths and lateral movement with Nmap, BloodHound, and CrackMapExec; recommended segmentation and firewall hardening. Drove vulnerability management across on-prem and cloud (AWS/Azure); tuned Nessus/Qualys scans, prioritized by CVSS, and tracked remediation to closure. Built Python/Bash automation in Kali Linux to standardize recon (Nmap scripts), wordlists, and evidence collection, improving speed and consistency. Produced decision-ready reports and PoCs mapped to MITRE ATT&CK; collaborated with engineering/IT to implement controls, re-test, and close findings (Metasploit, Wireshark).

• Collaborated with students from all academic levels in electrical engineering programs to identify challenges at the intersection of EE and cybersecurity, such as limitations in hands-on network security training for embedded systems and vulnerabilities in IoT device simulations, and presented these insights during faculty meetings, resulting in curriculum improvements that enhanced student preparedness for roles involving penetration testing of hardware-integrated networks and ethical hacking in electrical infrastructure. • Organized and led cybersecurity labs for electrical engineering students, focusing on practical exercises in network vulnerability scanning, secure coding for embedded devices, and simulating attacks on IoT networks using tools like Nmap and Wireshark, fostering hands-on skills in penetration testing and improving participants' ability to secure electrical systems against cyber threats.

Relavent Course Material : Computer Programming Fundamentals Software Systems Digital Systems Electric Networks Engineering Algorithms and Data Structures Discrete Mathematics for Engineers Differential Equations and Vector Calculus Signals and Systems I Probability and Stochastic Processes Communication Systems Control Systems Signals and Systems II