m
mibraheem1122

M Ibrahim Zafar

@mibraheem1122

Application Security Expert

Pakistan
English, Urdu
About me
Hi! I'm Muhammad Ibrahim , a highly skilled and certified cybersecurity professional with a profound passion for fortifying the digital landscapes of businesses and individuals. With a solid background in web penetration testing, I am dedicated to elevating your security posture and ensuring the resilience of your online assets. In the world where cyber threats evolve daily, securing your web applications is paramount. With hands-on experience in web application testing. I have previously been a (CEH) Ethical Hacking , Google Cybersecurity Professional Certificate and OSCP.... Read more

Skills

m
mibraheem1122
M Ibrahim Zafar
Offline • 
Average response time: 1 hour

See my services

Server Administration
I will implement secure cicd with appsec and devsecops automation
From$100 / projectMore details
Programming & Tech
I will perform comprehensive web and mobile penetration testing
From$50 / projectMore details

Portfolio

Work experience

Confidentials

Confidentials

Full-time • 3 yrs 9 mos

Assistant Manager Application Security

Jul 2026 - Present • 1 mo

1. Collaborate with development, DevOps, and engineering teams to integrate secure coding practices and security controls throughout the Software Development Life Cycle (SDLC). 2. Perform threat modeling, secure code reviews, penetration testing, and vulnerability validation while providing risk-based remediation recommendations. 3. Manage application security programs by defining security standards, tracking remediation efforts, ensuring compliance with industry frameworks, and reporting security metrics to stakeholders.

Penetration tester

Jun 2024 - Jul 2026 • 2 yrs 1 mo

1. Specialize in Application Security, implementing OWASP ASVS Level 3 controls on web applications to ensure robust security standards. 2. Conduct penetration testing for web applications, mobile applications, and SDKs, identifying and remediating critical vulnerabilities. 3. Experienced with CEN TS 18099 and ETSI TS 119 461, focusing on data injection, presentation attacks, and stream injection threats, and assessing system resilience against such attack vectors. 4. Familiar with ISO/IEC 27001 and SOC 2 standards, contributing to compliance, risk assessment, and security governance processes. 5. Perform endpoint monitoring and threat detection using Wazuh and Google Workspace security tools to identify suspicious activity and security incidents. 6. Collaborate with development teams to secure the SDLC (Secure Software Development Life Cycle) by integrating security best practices, controls, and testing methodologies. 7. Provide actionable security recommendations, detailed vulnerability reports, and hands-on support for implementing effective mitigations and long-term security improvements.

Penetration Tester (ITLAY base company)

Jan 2023 - Aug 2024 • 1 yr 7 mos

1. Conduct Web Application, API, and Mobile Application Penetration Testing. 2. Identify and validate critical vulnerabilities, including Account Takeover (ATO), Broken Access Control, IDOR, Authentication & Authorization flaws, Business Logic vulnerabilities, Session Management issues, and Privilege Escalation. 4. Assess applications against the OWASP Top 10, OWASP API Security Top 10, and OWASP ASVS Level 2 & Level 3 requirements. 5. Perform Secure Code Reviews to identify insecure coding practices and recommend remediation. 6. Integrate SAST, DAST, and SCA tools into CI/CD pipelines to support DevSecOps and Secure SDLC initiatives. 7. Configure and manage security tools such as SonarQube, Checkmarx, Veracode, OpenText Fortify, OWASP ZAP, Burp Suite Professional, Trivy, and Black Duck.