Open to opportunities

Bitreum Sovereign

@bitreumsovereign

Message

Cybersecurity professional specializing in penetration testing and red teaming.

Canada

Message

What I'm looking for

I am looking for a challenging role in cybersecurity where I can leverage my skills in penetration testing and red teaming, contribute to security improvements, and grow within a dynamic team focused on innovation and excellence.

With over 7 years of experience in cybersecurity, I specialize in penetration testing, security assessments, and threat analysis. My expertise lies in identifying vulnerabilities and conducting red team operations, ensuring organizations are resilient against cyber threats. I hold certifications in OSCP, CRTE, and CRTO, which validate my skills and commitment to the field.

In my most recent role as a Senior Security Consultant at NCC Group, I conducted comprehensive penetration tests across various platforms, including web applications, mobile applications, and cloud infrastructures. I provided detailed security assessments and collaborated with development teams to enhance security postures. My experience also includes leading security awareness training sessions and mentoring junior professionals, fostering a culture of security within organizations.

Throughout my career, I have been involved in numerous high-stakes projects, including assume breach red teaming and vulnerability assessments for clients in diverse industries. I am passionate about sharing my knowledge and contributing to the cybersecurity community, as evidenced by my speaking engagements at conferences and my published articles on cybersecurity topics.

Experience

Work history, roles, and key accomplishments

Current

Speaker

Current

BSides Myanmar Conferences

Presented Cyber Security Talks at BSides Myanmar Conferences. Shared insights on topics such as 'A Year in the Red' and 'Sniper Forensics Investigations' to the cybersecurity community.

Cybersecurity Public Speaking Forensics Presentation Communication Technical Training Community Engagement Information Security

Senior Security Consultant

NCC Group

Jun 2021 - Present (4 years 1 month)

Conducted penetration tests on web applications, mobile applications, API testing, vulnerability assessments, networks, and cloud infrastructures to identify security vulnerabilities. Performed red team operations to assess organizational resilience against cyber threats and delivered red team assessments aligned with MITRE ATT&CK and CBEST frameworks.

Penetration Testing Red Team Vulnerability Assessment Cloud Security API Testing CBEST Framework Network Security Mobile Security

Offensive Security Engineer, Red Team

Synapxe

Apr 2019 - Present (6 years 3 months)

Participated in assume breach red teaming, purple teaming, and breach attack simulations. Conducted general penetration testing, including web, mobile, and network assessments, and performed social engineering and network intrusion assessments.

Red Team Penetration Testing SIEM

Security Consultant

Deloitte Consulting

Feb 2018 - Present (7 years 5 months)

Conducted AWS security assessments, mobile app penetration tests, web application penetration test, API penetration testing, and network vulnerability assessments. Discovered and exploited vulnerabilities such as SQLi, RCE, XSS, SSRF, privilege escalation, and misconfigured cloud services.

AWS Security Mobile App Testing Penetration Testing API Testing Vulnerability Assessment SQLI RCE XSS)

Junior Cyber Ops Consultant

Bitdefender

Feb 2017 - Present (8 years 5 months)

Conducted cyber forensics, analysis, manual penetration tests, and vulnerability assessments. Acquired, preserved, and analyzed digital evidence from Windows, Linux, mobile, and cloud systems while maintaining full chain-of-custody.

Cyber Forensics Penetration Testing Vulnerability Assessment Digital Evidence Encase Autopsy Registry Hives

Education

Degrees, certifications, and relevant coursework

Murdoch University

Bachelor of Cyber Forensics, Information Security Management

Studied cyber forensics and information security management, gaining expertise in digital evidence analysis and security protocols. Developed a strong foundation in identifying and mitigating cyber threats.