Hello,
As a seasoned cybersecurity professional, I bring expertise in cybersecurity, and IT audit, including operational technology. Proficient in web and network penetration testing and Governance, Risk, and Compliance (GRC), I have extensive experience in ISO 27001 implementation, covering gap analysis, asset identification, risk assessment, and vulnerability mitigation. My familiarity with diverse frameworks such as NIST, ISACA, ISO, ITU, NCA, and compliance laws, including GDPR and HIPAA, is complemented by publications in reputable journals and IEEE conferences, verified at Google Scholar.
I also have experience in CTF challenges during my master's degree in Information Security. I have enormous experience in Kali Linux and tools like Nessus, nexpose, burp suit, snort, nmap, wireshark forensic tools like binwalk, Autopsy, FTK etc.
Committed to staying updated, I hold certifications such as Web Application Penetration Testing by EC-Council, Attack Methodology in IT & ICS by the U.S. Department of Homeland Security, and NSE 1 and NSE 2 by Fortinet. I have also done Cisco CCNA training in which I got extensive experience in Packet tracer. Currently, I am also providing undergraduate students with training on Cisco packet tracer and network security.
Best regards,
Yasir Iqbal