Mohammed A. Imran

Co-Founder

Singapore, Singapore15 yrs 11 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Founder of Practical DevSecOps and Hysn.
Led community chapters with over 3000 members.
Organized 50+ security events and won awards.

Stackforce AI infers this person is a DevSecOps expert with strong community engagement in the cybersecurity industry.

Contact

Skills

Core Skills

DevsecopsTrainingCommunity BuildingCommunity EngagementSecurity InfrastructurePenetration Testing

Other Skills

Architecture ReviewCISSPCertificationCode ReviewComputer ForensicsComputer SecurityCryptographyData SecurityEthical HackingEvent ManagementEvent OrganizationFirewallsIDSIPSISO 27001

About

I am the Founder and CEO of Practical DevSecOps and Hysn. We are on a mission to teach the software industry about DevSecOps and how it can help create safe and secure software. Apart from work-related activities, I have a strong passion for creating/improving information security communities where I live. I have started/leading two security chapters, null Singapore chapter and null Hyderabad chapter with 3000+ strong community wherein we organized 50+ events and won the Best Chapter Award. Specialties: Penetration Testing, Vulnerability Assessment, secure code review, threat modeling, and DevSecOps. SKILLS: Application Security DevSecOps Network Security Fuzzing and Exploit Development Reverse Engineering Malware Analysis Incident Response Exploits: https://www.exploit-db.com/exploits/40018/ Projects: Practical DevSecOps - https://www.practical-devsecops.com/courses-and-certifications/ Awesome Fuzzing - https://github.com/secfigo/Awesome-Fuzzing DevSecOps Studio - https://dso-studio.teachera.io/ DevSecOps Integra - coming soon.

Experience

15 yrs 11 mos

Total Experience

5 yrs 1 mo

Average Tenure

11 yrs 5 mos

Current Experience

Hysn technologies inc

Founder and CTO

Oct 2019 – Present · 6 yrs 8 mos · San Francisco Bay Area

Practical devsecops

Founder and Lead Trainer

Nov 2018 – Present · 7 yrs 7 mos · Singapore

Practical DevSecOps provides world class DevSecOps Training and Certifications.
Learn DevSecOps from Industry experts with practical, hands-on training in our state of the art online lab and achieve your DevSecOps Certification.

DevSecOpsTrainingCertification

Zendesk

Senior Security Engineer

Nov 2016 – Nov 2018 · 2 yrs · Singapore

Null the open security community

2 roles

n|u Singapore Chapter Founder and Leader

Promoted

Jan 2015 – Present · 11 yrs 5 mos

Null Singapore is a platform for information security folks in Singapore to meet and discuss known and cutting edge information security research. I lead Singapore chapter where we organize monthly meetups/workshops to spread the word.

Community BuildingEvent Organization

Hyderabad Chapter Leader

Feb 2011 – Sep 2016 · 5 yrs 7 mos

As a moderator, my responsibilities include providing platform to all Information security professionals in Hyderabad by organizing monthly null meets and taking care of venue arrangements, speakers etc., Also to see to it that the chapter's activities are aligned with Null community's Missions and Values.

Event ManagementCommunity Engagement

Autodesk

Senior Software Security Engineer II

Jul 2014 – Nov 2016 · 2 yrs 4 mos · Singapore

+ Built enterprise software security infrastructure for Static & interactive application analysis.
+ Performed Penetration Testing & Vulnerabilities Assessment of Autodesk’s cloud products and services.
+ Helped development teams in false positive analysis and remediation of vulnerabilities found during SAST and penetration testing.
+ Automated the SAST/IAST in CI/CD & standalone development environment as part of Secure SDLC.
+ Designed and implemented secure SDLC dashboard for senior management.
+ Trained developers/QA in identifying and fixing security flaws in web and standalone applications.
+ Designed and created the secure coding trainings in c/c++/java/ruby.
+ Designed and organized security hackathon(s) across various Autodesk offices in US, CANADA and Singapore.

Security InfrastructurePenetration TestingVulnerability Assessment

Ca technologies

Application Security Engineer

Nov 2013 – Jul 2014 · 8 mos · Greater Hyderabad Area

+ Manual Penetration testing and threat modeling of CA Developed Applications and CA Cloud applications, project planning and kick off meeting with the stakeholders, statement of work preparation.
+ Architecture Review of Cloud Applications & Infrastructure
+ Fortify Build integration, consulting service to development team on false positive analysis, report generation and issue remediation.
+ Train dev teams on Java secure coding, web application security and code review
+ Research and development on latest exploits and vulnerabilities.
+ Automate penetration testing process by writing plugins for popular scanners like burp.

Penetration TestingThreat ModelingArchitecture Review