Master of Science - MS

K. N. Toosi University of Technology

Field of study : Computer Systems Networking and Telecommunications

Bachelor of Computer Engineering

University of Kashan

Field of study : Computer Software Engineering

DIPLOMA IN MATHEMATICS AND PHYSICS

Imam Khomeini High School, Kashan

Field of study : MATHEMATICS

Senior Penetration Tester

Snappfood

Senior Security Engineer | Penetration Tester

Shaparak

• Performing Network, Web Application, Mobile Application and Product Penetration Tests

• Developed custom scripts and used automated tools to perform testing on Applications

• Developed Secure Coding and OWASP Top 10 vulnerabilities documents for development teams

• Performing Penetration Testing Based on OWASP, MASVS, MSTG, PCI DSS, NIST and CIS

• Participating in various stages of SDLC - Design Review/Threat Modeling/Code Review

• Red Teaming – Simulating Advanced Persistent Threats (APT) Base on Mitre ATT&CK

• Performing infrastructure and Cloud Penetration Testing (AWS, K8s)

• Training the developers with Secure Coding guidelines

• Tuning Fortiweb for detecting new cyber threat

Security Researcher

Open Bug Bounty

https://www.openbugbounty.org/researchers/kh4sh3i/

Penetration Tester/Red Team

Faraz Pajohan

• Vulnerability Assessment Expert, Threat modeling, Security code review

• do more than 100 web applications, Web services project penetration test

• Development of tools to automate part of the penetration testing process

• team leader of API penetration test based on OWASP

• Penetration testing of dozens of mobile banking applications

• Critical thinker and self-taught professional who likes to solve problems

• Mastery of commercial and open source security tools including, but not limited to: Nmap, Nessus, BurpSuite, Cobalt Strike, Metasploit, Wireshark

Security Engineer

Pishgaman Kaipod

• work effectively in a collaborative environment (agile, scrum).

• Proficient with Docker, Kubernetes, CI/CD Pipelines

• work with various tools such as Jenkins, GitLab, JIRA, Git, Nexus, AWS, Checkmarx, etc

Application Security Engineer

Private Company

• Providing security solutions for company projects : Parent Control, DLP (Data Leakage Prevention) Network, DG Next-Generation Firewall, DPI Engine

Senior Application Developer

jetamooz.com

• Development of mobile applications and games for Android

• Develop more than 50 web applications and work with modern technologies

• working with multiple programming language such as(Java, Python, Bash, PHP)

• Expert understanding of security in the SDLC (DevOps practices) and SAST/SCA/DAST tools