Open to opportunities

Ashraful Islam

@ashrafulislam7

SOC Analyst and penetration tester delivering web security testing, SIEM monitoring, and incident response with 2+ years experience.

Bangladesh

Message

What I'm looking for

I’m looking for a remote SOC / Security Analyst role where I can own SIEM monitoring, alert triage, and incident response—while continuing to deepen threat detection and vulnerability testing through real-world, hands-on security work.

I’m a results-driven cybersecurity professional with a BSc in Cybersecurity and 2+ years of hands-on experience in security operations, vulnerability assessment, and penetration testing. I’ve delivered web application security testing for 20+ international clients, identifying critical issues like XSS, SQL Injection, and server misconfigurations, and providing full remediation guidance with risk-rated reports and proof-of-concept demonstrations.

I also discover and responsibly disclose real-world vulnerabilities through HackerOne and Bugcrowd, using industry-standard reconnaissance and exploitation practices. To strengthen my capabilities, I’m building skills through TryHackMe labs and a Python automation project that reduced manual recon time by ~60%, and I’m actively seeking a remote SOC / Security Analyst role to contribute to global security operations.

Experience

Work history, roles, and key accomplishments

Current

Bug Bounty Hunter

Current

HackerOne & Bugcrowd

Jan 2023 - Present (3 years 5 months)

Discovered and responsibly disclosed security vulnerabilities to global organizations via HackerOne and Bugcrowd. Conducted reconnaissance, vulnerability detection, and exploitation, applying OWASP Top 10 knowledge through ongoing real-world web security practice.

Web Application Security Vulnerability Discovery Responsible Disclosure OWASP Top 10 Web Vulnerability Validation Threat Analysis

Current

Freelance Security Specialist

Current

Fiverr & Upwork

Jan 2023 - Present (3 years 5 months)

Delivered web application security testing for 20+ international clients, identifying and reporting critical issues including XSS, SQL injection, and server misconfigurations with clear remediation guidance. Produced penetration testing reports with risk ratings, proof-of-concept evidence, and actionable next steps.

Security Testing Penetration Testing Vulnerability Assessment XSS SQL Injection Burp suite Nessus Report Writing

Education

Degrees, certifications, and relevant coursework

American International University–Bangladesh

Bachelor of Science in Cybersecurity, Cybersecurity

Grade: CGPA 3.00/4.00

Activities and societies: Relevant coursework: SIEM & Log Analysis, Incident Response Workflow, Network Security & Firewalls, Malware & Threat Analysis, Vulnerability Management, Secure Software Development.

BSc in Cybersecurity (CGPA 3.00/4.00) with coursework in SIEM/log analysis, incident response workflow, network security, malware & threat analysis, vulnerability management, and secure software development.