Syed Muhammad Khizar Hussain

Product Manager

Karachi, Sindh, Pakistan4 yrs 4 mos experience

Key Highlights

Almost 4 years of experience in offensive security
Numerous awards and hall of fame recognitions
Substantial earnings from bug bounty programs

Stackforce AI infers this person is a skilled penetration tester specializing in offensive security and bug bounty hunting.

Contact

Skills

Core Skills

Vulnerability Assessment And Penetration Testing (vapt)Ethical HackingVulnerability AssessmentPenetration Testing (vapt)Bug Bounty Hunter

Other Skills

Active DirectorySecurity TestingTeam LeadershipTesting Tools

About

Experienced and accomplished penetration tester with almost 4 years of experience in offensive security. Adept in identifying vulnerabilities and exploiting them to enhance organizational security. Actively involved in bug bounty programs and has received numerous awards and hall of fame recognitions from various organizations, including e-commerce and service providers, and has earned substantial bounties, including four-digit dollar amount Certifications: • Certified Red Team Professional (CRTP) • Certified Ethical Hacker (CEH) • Certified Red Team Analyst (CRTA) • Certified AppSec Practitioner (CAP) • Certified Network Security Practitioner (CNSP) Trainings: • ISO/IEC 27001 Information Security Associate • Practical Ethical Hacking (PEH)

Experience

4 yrs 4 mos

Total Experience

1 yr 7 mos

Average Tenure

1 yr 3 mos

Current Experience

Risk associates - emea & asia

Penetration Tester

Feb 2025 – Present · 1 yr 3 mos · Karachi Division · Hybrid

Performed social engineering attacks (phishing, pretexting, etc.)
Tested security of desktop applications
Conducted reverse engineering and binary analysis
Conducted VAPT on network devices including routers, switches, firewalls and analyzers.
Performed security assessments on cloud assets.
Performed VAPT on Microsoft 365 (Azure AD, SharePoint, OneDrive, Outlook)
Performed VAPT on Microsoft Dynamics (Finance, Operation, Retail).
Conducted Azure AD assessment using different modules like AADInternals, Graphrunner & etc

Active DirectoryVulnerability Assessment and Penetration Testing (VAPT)Ethical HackingSecurity Testing

Apprise cyber pvt ltd

2 roles

Penetration Tester

Promoted

Sep 2023 – Feb 2025 · 1 yr 5 mos · Karāchi · On-site

Perform internal and external vulnerability scan.
Perform internal and external network penetration testing.
Perform web, android and iOS applications penetration testing.
Performs revalidation on both vulnerability scans and penetration tests upon clients' requests.
Documents the findings, writing security reports.
Discuss solutions and security reports with the clients' management team.
Provide feedback and verifications to clients' after security fixes are issued.
Educating other teams about Information Security.

Vulnerability AssessmentPenetration Testing (VAPT)Team Leadership

Junior Penetration Tester

Jan 2022 – Aug 2023 · 1 yr 7 mos · Karāchi · On-site

Perform security tests on web-based and mobile-based applications.
Try to break/bypass into security protected applications for vulnerabilities.
Analyze the ways to exploit vulnerabilities.
Conducting thorough research and testing.
Documents the findings, writing security reports.
Discuss solutions with application development team and management.
Providing feedback and verifications after security fixes are issued.

Vulnerability AssessmentPenetration Testing (VAPT)Ethical Hacking

Freelance

Bug Bounty Hunting

Mar 2022 – Feb 2024 · 1 yr 11 mos

Participated in Bugcrowd, HackerOne, and multiple Open Vulnerability Disclosure Programs
Try to break/bypass into security protected applications for vulnerabilities.
Performs Reconnaissance, vulnerability discovery and exploitation
Provide feedback and verifications to clients' after security fixes are issued.
Collaborated with security teams and developers to resolve reported vulnerabilities.
Strong track record of valid submissions.
Develops different bug hunting techniques.

Bug Bounty HunterEthical Hacking