Summary
Overview
Work History
Education
Skills
Affiliations
Websites
Timeline
Generic

Muhammad Awais Noshahi

Bangkok,Thailand

Summary

Accomplished Cyber Security Analyst with over 8 years of hands-on experience in penetration testing and security consulting for global enterprises. Proven ability to identify and mitigate security vulnerabilities across complex IT infrastructures. Recognized by industry leaders such as ESET, Adobe, Starbucks, Instacart, Microsoft, and Google for exceptional contributions to their security programs. Adept at developing and implementing robust security measures, conducting comprehensive security assessments, and providing actionable recommendations. Known for a keen analytical mind, a deep passion for cybersecurity, and a commitment to continuous learning. Excels both independently and as a key team member, driving projects to successful completion while fostering a collaborative and innovative work environment.

Overview

9
9
years of professional experience

Work History

Senior Security Consultant and Penetration Tester

E-CQURITY
Bangkok, Thailand
07.2019 - Current
  • Performed extensive security assessments and penetration tests on a wide range of systems, networks, and applications, successfully identifying and exploiting security vulnerabilities.
  • Created comprehensive reports containing practical suggestions for improving client security measures.
  • Guided and supported junior security consultants, promoting a culture of perpetual improvement and career development.

Red Team Member

Synack
Remote
12.2018 - 04.2019
  • Contributed to red team efforts by participating in simulated advanced persistent threat scenarios for evaluating organizational defenses.
  • Created unique tools and scripts to optimize penetration testing techniques and exploit development processes.
  • Delivered comprehensive reports on vulnerabilities and attack vectors, offering strategic recommendations for effective mitigation.

Bug Bounty Hunter

BugCrowd
Remote
07.2015 - 11.2018
  • Identified and reported security vulnerabilities for various companies through the BugCrowd platform.
  • Conducted in-depth research and analysis of emerging threats and vulnerabilities.
  • Earned multiple accolades and rewards for exceptional findings and contributions.

Bug Bounty Hunter

HackerOne
Remote
02.2016 - 05.2018
  • Conducted independent security research and vulnerability assessments for various companies via the HackerOne platform.
  • Developed proof-of-concept exploits to demonstrate the impact of discovered vulnerabilities.

Education

Practical Junior Mobile Tester (PJMT) -

TCM Security |
05-2024

Offensive Security Web Expert (OSWE) -

Offensive Security |
03-2022

Offensive Security Wireless Professional (OSWP) -

Offensive Security |
04-2021

Offensive Security Certified Professional (OSCP) -

Offensive Security |
12-2019

Certified Ethical Hacker (CEH) -

EC-Council
07-2018

Skills

  • Penetration Testing (Web, Mobile, Network) - (BlackBox, GreyBox, WhiteBox)
  • Secure Source Code Review
  • Tools (Metasploit, Burp Suite, SQLMap, OWASP ZAP, Nmap, Nessus, IDA Pro, Hopper, Ghidra, jadx, jd-gui, windbg, debuggers)
  • Programming & Scripting (Python, Bash, PHP, NodeJS, C/C, Java, C#)
  • Others (Managing Security Breaches, OSINT Techniques, Social Engineering, Phishing, Malware Development)
  • OS (Linux, Windows, MacOS)

Affiliations

  • Capture The Flag (Onsite | Online)

Timeline

Senior Security Consultant and Penetration Tester

E-CQURITY
07.2019 - Current

Red Team Member

Synack
12.2018 - 04.2019

Bug Bounty Hunter

HackerOne
02.2016 - 05.2018

Bug Bounty Hunter

BugCrowd
07.2015 - 11.2018

Practical Junior Mobile Tester (PJMT) -

TCM Security |

Offensive Security Web Expert (OSWE) -

Offensive Security |

Offensive Security Wireless Professional (OSWP) -

Offensive Security |

Offensive Security Certified Professional (OSCP) -

Offensive Security |

Certified Ethical Hacker (CEH) -

EC-Council
Muhammad Awais Noshahi