Looking for a job

Hasnan User

@hasnan

Message

I've worked as a GRC Analyst . I build cybersecurity tools and assess vulnerabilities, risk, and compliance controls.

Pakistan

Message

What I'm looking for

I'm looking to grow in cybersecurity through hands-on work in GRC, SOC operations, vulnerability assessment, secure software development, and risk management.

I'm building cybersecurity tools including AIVA, a vulnerability risk-correlation platform, and secpipe, a Python pipeline that correlates SAST, DAST, and IAST findings using FastAPI, LangGraph, CISA KEV, and OSV feeds.

At PKCERT, I worked with ISO 27001/ISMS control mapping, co-authored an ISMS report, and delivered a simulated e-scooter company's risk assessment, treatment plan, and Statement of Applicability across 93 Annex A controls. I also practice SOC analysis, vulnerability assessment, web security testing, and network scanning through TryHackMe, PortSwigger labs, Nmap, OpenVAS, and Burp Suite.

Experience

Work history, roles, and key accomplishments

GRC Intern

Pakistan Computer Emergency Response Team (PKCERT)

Jul 2026 - Aug 2026 (1 month)

Worked hands-on with ISO 27001/ISMS, including Annex A control mapping and clause-based compliance study. Co-authored a full ISMS report and contributed to a Pakistan Information Security Framework (PISF) review.

ISO 27001 ISMS Risk Assessment Compliance NIST RMF Gap Analysis