06 // CV

Resume

Profile

Security professional with a strong focus on offensive security and penetration testing, bringing 14+ years in banking IT and 8+ years specializing in cybersecurity. Certified eWPTXv2, eJPTv2, CEH Master, and ISO 27001 Lead Auditor, with hands-on daily practice across web, mobile, API, network, and Active Directory penetration testing in enterprise and PCI DSS-regulated environments.

Work Experience

Principal Officer (Computer), Pubali Bank PLC.Jan 2026 – Present
  • Lead enterprise-wide VAPT programs covering web, mobile, API, network infrastructure, cloud environments, and core banking systems.
  • Lead PCI DSS compliance and Cyber Security Services (CSS) activities: INVA, ASV scans, INPT, CDD, network segmentation validation.
  • Lead national Cyber Drills, Financial and CII Drill programs, and CTF competitions on behalf of the bank.
Senior Officer (Computer), Pubali Bank PLC.Jul 2021 – Dec 2025
  • Performed VAPT for infrastructure and applications; created SIEM detection use cases and RegEx rules.
  • Conducted malware analysis; worked on SIEM-SOAR, PAM, PCI-DSS, and ISO-27001 implementation.
Officer (Computer), Pubali Bank PLC.Jan 2017 – Jun 2021
  • Security policy, log analysis, firewall/IDS/IPS/UTM management, VAPT with Qualys.
Junior Officer (Computer Engineer), Pubali Bank PLC.Sep 2011 – Dec 2016
  • Banking software development; led a complete system migration.

Education

Jahangirnagar University — Master of Computer Science (MSc. in CS), 2016

Northern University Bangladesh (NUB) — BSc. in Computer Science and Engineering, 2013

Selected Certifications

eWPTXv2 · eJPTv2 · CEH Master · CEH Practical · CEH · APIsec Certified Practitioner · ISO 27001 Lead Auditor · Cisco Certified Specialist — Enterprise Core · Oracle Cloud Infrastructure Architect Professional · and 29 more — see the full Certifications page.

Notable Achievements

  • NASA Hall of Fame — Letter of Appreciation for responsible vulnerability disclosure.
  • Oracle Hall of Fame — Credited in Oracle's Critical Patch Update Advisory, April 2025.
  • HackerOne Bug Hunt 2023 — Finalist, Bug Bounty Community Bangladesh.
  • HackTheBox — Subject Matter Expert, "Hacker" rank, 40+ machines completed.
Request Full Resume (PDF)