Open to opportunities

Afreen User

@afreenuser2

Message

Cybersecurity expert with 6+ years in risk management and vulnerability.

United States

Message

What I'm looking for

I seek a role that fosters growth, emphasizes security culture, and offers challenges in vulnerability management.

With over 6 years of professional experience in cybersecurity, I specialize in vulnerability management, risk management, and security operations. My journey has taken me through various domains, including banking and e-commerce, where I've successfully reduced critical vulnerabilities and enhanced security postures across multiple organizations.

At Bank Alfalah, I led initiatives that decreased vulnerabilities by 25% through targeted mitigation strategies and conducted comprehensive security assessments for over 50 applications. My role as an Application Security Analyst at Faysal Bank allowed me to embed security into product development, ensuring that 90% of applications were free of high-severity vulnerabilities pre-launch. I am passionate about fostering a culture of security awareness and continuously improving security practices within organizations.

Experience

Work history, roles, and key accomplishments

Sr. Cyber Security & Application Security Analyst

Bank Alfalah

Feb 2024 - Mar 2025 (1 year 1 month)

Analyzed vulnerabilities across applications, systems, and networks, reducing critical vulnerabilities by 25% through targeted mitigation strategies. Conducted comprehensive application security testing (Dynamic and Static), both pre- and post-deployment.

Vulnerability Management Application Security Risk Assessment Incident Response Threat Intelligence Security Auditing Compliance Digital Forensics Security Information And Event Management (SIEM)Penetration Testing

Application Security Analyst

Faysal Bank

Sep 2022 - Feb 2024 (1 year 5 months)

Responsible for defining and executing the security strategy for on-prem offerings and Cloud services, ensuring security is embedded from design to testing. Conducted dynamic and static application security assessments, ensuring 90% of applications were free of high-severity vulnerabilities pre-launch.

Application Security Cloud Security Threat Modeling Vulnerability Management Database Security Security Automation

Cyber Security Engineer / Lab Security Engineer

Sir Syed University of Engineering and Technology

Responsible for improving the security configurations for the University, with exposure to systems, strategy, and operations. Provides technical expertise and task management for specific security area of focus, escalating when appropriate, for workstations and servers.

System Administration Active Directory Group Policy Patch Management Security Auditing SCCM

IT Security Executive

Daraz E commerce

Jan 2019 - Apr 2021 (2 years 3 months)

Conducted independent security reviews, oversaw penetration tests, and provided guidance to stakeholders on remediation strategies. Played a crucial role in ensuring applications across numerous Daraz platforms are designed and executed with the highest security standards.

Security Reviews Penetration Testing Key Management Encryption Security Awareness Security Policies Incident Response

Education

Degrees, certifications, and relevant coursework

Sir Syed University of Engineering and Technology

BS Computer Science, Computer Science

2017 - 2020

Completed a Bachelor of Science in Computer Science, focusing on foundational computer science principles. Gained comprehensive knowledge in various aspects of computing.