Open to opportunities

Aamer Shareef

@aamershareef

I build offensive security, vulnerability management, and incident response programs that reduce cyber risk.

At Veson Nautical, I lead critical incident investigations, cloud security audits across AWS and GCP, and security resilience exercises. Previously at TikTok, I built container security scanning processes, integrated image scanning into CI/CD, and reduced critical vulnerabilities by 90% for core crown-jewel assets.

I've also established internal red and penetration-testing teams at Arm, built security automation tools including Project Hunter, and delivered secure SDLC, threat modelling, SAST, DAST, and incident-response improvements across semiconductor, fintech, social media, and maritime environments.

Experience

Work history, roles, and key accomplishments

Current

Senior Cyber Security Engineer

Current

Veson Nautical

Jun 2025 - Present (1 year 2 months)

Leading critical security incident investigations using SIEM, EDR, and threat intelligence platforms. Performing cloud security audits for AWS and GCP environments and implementing security playbooks.

SIEM EDR Threat Intelligence Incident Response Root Cause Analysis AWS GCP Splunk Crowdstrike DDoS Mitigation Security Policies

Senior Vulnerability Management Engineer

TikTok ByteDance UK Ltd

Oct 2023 - May 2025 (1 year 7 months)

Developed and managed container security scanning processes from scratch, integrating image scanning into CI/CD pipelines. Reduced critical vulnerabilities by 90% for core crown jewel assets.

Container Security Vulnerability Management CI CD Trivy ByteSecurity Python Scripting Security Automation Reporting

Application Security Engineer

NewDay Cards

Nov 2022 - Oct 2023 (11 months)

Established and managed a bug bounty program, implemented SAST tools, and integrated security scanning into CI/CD pipelines. Provided security consultation and threat modelling guidance to development teams.

Bug Bounty SAST DAST CodeQl API Security NoNameAPI CI CD Threat Modeling Security Consulting

Adversarial Security Specialist

Arm Ltd

Apr 2021 - Oct 2022 (1 year 6 months)

Core member of Threat and Vulnerability Management team, built and led internal red team, and mapped MITRE ATT&CK framework against security controls. Developed security automation tools and conducted penetration tests.

Red Teaming Penetration Testing Security Automation Threat Hunting Azure Sentinel Office 365 Secure SDLC SAST DAST

Adversarial Security Analyst

Arm Ltd

Oct 2019 - Mar 2021 (1 year 5 months)

Established internal penetration testing team, developed testing frameworks, and implemented cost-saving tracking process saving £200,000. Conducted security assessments on AWS, Docker, and Terraform.

Penetration Testing AWS Docker Terraform Kenna Security DAST SAST Vendor Management

SOC Analyst

Arm Ltd

Apr 2019 - Sep 2019 (5 months)

Developed guidance for DLP incidents, led incident response and triaging, and configured SOC tools. Created EDR YARA rules and contributed to run books for malware and social engineering incidents.

Incident Response DLP LogRhythm SIEM EDR YARA Threat Intelligence Malware Analysis Social Engineering

IT Graduate

Arm Ltd

Mar 2018 - Mar 2019 (1 year)

Designed and configured small-scale networks, including VLANs, routers, and switches. Assisted in incident response and vulnerability management.

Cisco Extreme Networks Aruba Opengear Incident Response Vulnerability Management

Security Researcher

Lancaster University

Nov 2017 - Jan 2018 (2 months)

Researched cryptographic algorithms and election security, contributing to an E2E verifiable E-voting system. Developed Python code and modified NFC reader drivers to identify vulnerabilities.

Cryptography Python C C++NFC Vulnerability Research