Operator Profile

I'm Jashim Uddin Bhuiyan, Principal Officer & Senior Security Analyst at Pubali Bank PLC, with 14+ years in banking IT and 8+ years specializing in offensive security, purple teaming, and enterprise cyber defense.

I lead enterprise-wide Vulnerability Assessment and Penetration Testing (VAPT) across web, mobile, API, Active Directory, network, and core banking environments. My work combines an attacker's mindset with a defender's perspective — emulating real-world adversaries, identifying attack paths, validating security controls, and strengthening detection and response capabilities.

My expertise includes Red & Purple Team operations, PCI DSS v4.0 (INVA, ASV, INPT, CDD, and network segmentation validation), SAST/DAST-driven application security, secure architecture reviews, and aligning security controls with ISO/IEC 27001 and banking regulatory requirements.

Beyond my professional role, I'm passionate about offensive security, bug bounty hunting, and continuous learning through penetration testing labs, cyber drills, and CTF competitions. My security research has been recognized by organizations including NASA and Oracle through their responsible vulnerability disclosure programs.

Bug Bounty Hunter @ HackerOne CTF Player @ HackTheBox Top 1% @ TryHackMe OCI Architect CCNP DFIR / SOC
// Proficiency Scan

Hall of Fame

🛰
NASA Hall of Fame
Letter of Appreciation from NASA for responsibly disclosing a vulnerability in their application.
CRITICAL
🛑
Oracle Hall of Fame
Credited in Oracle's Critical Patch Update Advisory — April 2025. View advisory →
HIGH
🏆
HackerOne Bug Hunt 2023 — Finalist
Finalist recognition from Bug Bounty Community Bangladesh (BBCBD).
FINALIST
🎓
EC-Council Career Mentor
Recognized as a Cybersecurity Career Mentor by EC-Council.
MENTOR
💻
HackTheBox — Subject Matter Expert
"Hacker" rank, 40+ machines and challenges completed; awarded Subject Matter Expert status.
SME
🌐
Ambassador Program
APISec University Ambassador and INE Ambassador. View badge →
AMBASSADOR