HACTRON.SEC
HOST ONLINE · DUBAI, UAE

IDENTITY / 001 · SECURITY CONSULTANT

Think like an
attacker.
Build like a defender.

Cybersecurity professional with 4+ years of experience in Application Security, Software Security, Vulnerability Management, Penetration Testing, and Reporting, focused on offensive security, product security, and practical risk reduction.

Explore operations ↘ Open secure channel
● ● ●hactron@secops:~ENCRYPTED

$ whoami

Cybersecurity Consultant

$ specialize --in

Application Security, Product Security, Vulnerability Management, Exploit development

$ status READY_

HS
APIAPPCLOUD
4+YEARS
SECURITY
APISECURITY
FOCUS
<3%AVG ROLLOUT
DEFECTS
20%REPEAT INCIDENT
REDUCTION
01 / PROFILE

Breaking systems to
build them stronger.

I'm a Cybersecurity Consultant with 4+ years of experience across application, API and product security.

My work spans end-to-end API assessments, source code review, cloud and container security, CI/CD security, vulnerability management, and security controls around API gateways, WAFs, firewalls and enterprise platforms.

I turn technical findings into actionable remediation and help engineering teams move security closer to design and development.

02 / ARSENAL

Attack surface
mapped.

SELECT A DOMAIN →

LIVE INTELLIGENCEAPI SECURITY

End-to-end API security assessments covering authentication, authorization, business logic, rate limiting, input validation and API gateway controls.

03 / OPERATIONS

Field experience.

01
CURRENT

Security Consultant

Enterprise Banking Client · Dubai, UAE

  • Conduct end-to-end product API security assessments across multiple squads and products.
  • Perform source code reviews and assess application architecture and security controls.
  • Work across container security, CI/CD pipeline security and AWS, Azure and GCP practices.
  • Review Kafka topics, API Gateway, WAF, firewall and network security controls.
  • Use Burp Suite, Checkmarx, Sysdig and Kibana for testing and security monitoring.
  • Promote Shift Left security and collaborate with engineering/product teams on remediation.
02
PREVIOUS

Associate Consultant

Leading Bank Client

  • Conducted 50+ end-to-end Web and API VAPT assessments using Burp Suite, OWASP ZAP, and Postman, delivering actionable remediation plans.
  • Reviewed third-party VAPT reports to ensure accuracy, completeness, and alignment with internal security standards.
  • Executed wireless security assessments (WPA/WPA2 handshakes, dictionary attacks, evil twin attacks) to identify network vulnerabilities.
  • Performed web, mobile and network security assessments using industry-standard methodologies.
04 / RESEARCH LAB

Always
curious.

// Sanitized public-facing work only

01 / API

API Security Notes

Authentication, authorization, business logic and defensive API design.

VIEW →
02 / WEB

VAPT Methodology

Practical testing workflows mapped to common application risks.

VIEW →
03 / MOBILE

Android Security

APK analysis, local storage, session and transport security.

VIEW →
04 / LAB

Security Experiments

Personal labs, tooling and controlled security experiments.

VIEW →
05 / IMPACT

Measured by impact.

2 WKS

Early delivery on selected FY modules

0

Critical-to-medium defects at go-live on reported rollouts

5

Knowledge-sharing sessions in FY26

95%+

Target billable utilization across squads/products

AWARDBest Team AwardENBD Client
AWARDBravo AwardICICI Client
CONTRIBUTIONSecurity Knowledge SharingAPI · Wi-Fi · Security Engineering
06 / CREDENTIALS
CRTO

Certified Red Team Operator

Offensive security using Cobalt Strike

CRT-ID

Certified Red Team Infra Developer

Offensive security & red-team infrastructure

CASA

Certified API Security Analyst

API security assessment & defense

CPIA

Certified Process Injection Analyst

Understanding Process Injection Techniques

07 / SECURE CHANNEL

Let's secure
something.

Security Discussions · Professional Opportunities · Collaborations

EMAIL ↗ LINKEDIN ↗ GITHUB ↗

COMMAND CENTER

Jump to a section

01 — Profile02 — Arsenal03 — Operations04 — Research Lab07 — Secure Channel

Press ESC to close