Open to opportunities

Bahjath Nisa

@bahjathnisa

Message

Cybersecurity Engineer specializing in penetration testing and vulnerability assessment.

United Arab Emirates

Message

What I'm looking for

I am looking for a role that offers opportunities for growth, collaboration, and the chance to tackle challenging cybersecurity issues.

I am a dedicated Cybersecurity Engineer with extensive experience in web and mobile penetration testing. My expertise lies in identifying and mitigating OWASP Top 10 vulnerabilities, including XSS, SQLi, and IDOR. I have a strong background in manual testing using tools like Burp Suite and OWASP ZAP, and I excel in conducting thorough security assessments with actionable remediation guidance.

Currently, I work at Haward Technology Middle East, where I conduct comprehensive penetration tests for both in-house and client applications. My role involves drafting detailed technical vulnerability reports and advising management on secure coding practices. I am also proficient in setting up and monitoring Palo Alto firewalls to enhance security posture.

With a solid foundation in Active Directory and Windows systems, I have completed SOC training and am preparing for the Certified SOC Analyst exam. I am passionate about threat detection, monitoring, and incident response, and I continuously seek to improve my skills in the ever-evolving field of cybersecurity.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Engineer

Current

Haward Technology Middle East

Nov 2024 - Present (8 months)

Conducted comprehensive web and Android penetration tests for in-house and client applications, identifying critical vulnerabilities like Stored XSS, IDOR, and File Inclusion. Advised management on implementing secure coding practices and mitigation strategies, and drafted technical vulnerability reports with Proof-of-Concept (PoC) and remediation.

Penetration Testing OWASP Top 10 Burp suite Palo Alto Firewalls Vulnerability Assessment Incident Response Secure Coding Technical Reporting

Technical Engineer

Al Mamaas Line Trading LLC

Feb 2023 - Present (2 years 5 months)

Managed Active Directory accounts, including creation, modification, migration, and permissions, and conducted website penetration testing. Implemented security controls across systems such as antivirus, encryption, patching, and firewall rules.

Active Directory Penetration Testing System Configuration Network Security Encryption

System Engineer

Edgeforce Solutions Pvt Ltd

Aug 2019 - Present (5 years 11 months)

Assisted senior penetration testers in conducting vulnerability assessments and penetration tests for client systems. Administered Active Directory services, including user and group account management, GPO configuration, and rights delegation.

Vulnerability Assessment Penetration Testing Active Directory Zendesk Account Management Technical Support

Education

Degrees, certifications, and relevant coursework

APJ Abdul Kalam Technological University

B.Tech, Electronics & Communication Engineering

Completed a Bachelor of Technology in Electronics & Communication Engineering. Gained foundational knowledge in electronic systems and communication principles.