02 // Career

Mission Log

Principal Officer (Computer)
Pubali Bank PLC. — Jan 2026 – Present
ACTIVE
  • Lead enterprise-wide VAPT covering web, mobile, API, network, cloud and core banking systems.
  • Direct offensive security ops: vulnerability validation, exploitation oversight, attack simulation, risk-based remediation.
  • Own PCI DSS & CSS activities — INVA, ASV scans, INPT, CDD, network segmentation validation, app security assessments.
  • Govern application security assurance pre-production, leveraging SAST, DAST and secure code review.
  • Define risk frameworks and offensive security standards aligned to ISO 27001 / PCI DSS / banking regulation.
  • Lead the bank's participation in national Cyber Drills, Financial & CII Drill programs, and CTF competitions.
Senior Officer (Computer)
Pubali Bank PLC. — Jul 2021 – Dec 2025
ARCHIVED
  • Performed VAPT across infrastructure and applications; hunted vulnerabilities in web, mobile, API and network layers.
  • Implemented risk frameworks and controls aligned to regulatory requirements with sustainable, audited compliance.
  • Wrote SIEM use cases, detection rules and RegEx to sharpen detection coverage.
  • Conducted malware analysis and tracked emerging malware lifecycles.
  • Worked on SIEM-SOAR, PAM, PCI DSS and ISO 27001 implementation; joined BD-CIRT / FINDrill cyber drill teams.
Officer (Computer)
Pubali Bank PLC. — Jan 2017 – Jun 2021
ARCHIVED
  • Defined and maintained corporate security policy; trained end users.
  • Performed security analysis and reporting from ICT infrastructure logs.
  • Managed firewall, IPS, IDS and UTM technologies; maintained VAPT with Qualys and open-source tooling.
Junior Officer (Computer Engineer)
Pubali Bank PLC. — Sep 2011 – Dec 2016
ARCHIVED
  • Designed, developed and tested software solutions for banking requirements.
  • Led a complete system migration; maintained apps in Oracle Forms Developer.

03 // Arsenal

Technical Skills

Offensive Security / Penetration Testing
SQLiXSSSSRF LFI/RFIIDORAuth Bypass OWASP Top 10Recon & Enumeration ExploitationPrivilege Escalation
Active Directory & Network Security
LDAP EnumerationACL Abuse Kerberos AttacksLateral Movement PivotingNetwork Segmentation Firewall / IDS / IPS / UTM
Detection Engineering & SIEM
SIEM Use-Case DevelopmentRegEx-Based Detection SIEM-SOARMalware Analysis Log Analysis / L3 TriageThreat Hunting
Application Security
SAST / DASTFortify WebInspect Secure Code ReviewMobile AppSec (MobSF) API Security
Governance, Risk & Compliance
PCI DSS (INVA / ASV / INPT / CDD)ISO 27001 Risk Assessment FrameworksPAM
Tools & Platforms
Burp SuiteBloodHoundNetExec ImpacketffufNmap ResponderWiresharkMetasploit QualysCoreImpact
Cloud & Infrastructure
Oracle Cloud Infrastructure (OCI)Enterprise Networking (CCNP)
Programming & Operating Systems
PythonLinuxWindows