Looking for a job

Ahmad Naaem Saad

@ahmadnaaemsaad

Cybersecurity intern at PKCERT who delivered five security assessment reports and built a Python host enumeration and vulnerability scanner.

Pakistan

Message

At National Cyber Emergency Response Team (PKCERT), I delivered five client-style security assessment reports totaling 80+ pages, documenting findings with CVSS ratings and prioritized remediation steps. I also tested firewall effectiveness against an identical attack chain in a segregated VirtualBox lab.

At CYFOR Cybersecurity and Networking Lab, I built a security research lab separated from the university production domain and configured Layer 2/3 switches, Servers, Cisco ASA and Fortinet firewalls, Proxmox, ESXi,and Wazuh SIEM. I’m currently leading a four-member team building a Wazuh plugin that maps network topologies and ranks attack paths.

For my PKCERT internship, I built HEV-Scan, a Python CLI tool that combines DNS enumeration, Nmap service detection, and NVD API CVE correlation into an HTML report. I also co-authored a paper on cyber threats in South Asia’s education sector that was accepted at ICETAS 2026 and is pending MDPI publication.

Experience

Work history, roles, and key accomplishments

Current

Associate Researcher & Core Member

Current

CYFOR Cybersecurity and Networking Research Lab

May 2026 - Present (4 months)

Built a security research lab fully segregated from the university production domain, enabling live threat testing for students. Configured Layer 2/3 switches, 2 firewalls (Cisco ASA and Fortinet) with ACL policies, and a Wazuh SIEM deployment.

Network Security Firewall Configuration Cisco ASA Fortinet ACLs Wazuh SIEM L2 L3 Switches Proxmox VE VMware ESXi

VAPT Intern

National Cyber Emergency Response Team (PKCERT)

Jul 2026 - Aug 2026 (1 month)

Delivered 5 client-style security assessment reports totaling 80+ pages across reconnaissance, vulnerability assessment, system hacking, tool development, and Linux hardening. Quantified perimeter firewall effectiveness by executing an identical attack chain against a Windows 10 target with the firewall enabled and disabled in a segregated VirtualBox lab.