At the Government of the People's Republic of Bangladesh, I monitor security events and investigate honeypot telemetry to enrich threat intelligence and detection rules. I also hardened network devices, reducing the attack surface by 40%.
I handle email-based threats, malware detonation through sandboxing, and DLP policy enforcement. My work also includes threat hunting aligned with MITRE ATT&CK and VAPT assessments covering issues such as SQL injection, XSS, and authentication bypass.
At Primacy Infotech Ltd., I conducted penetration tests for web applications and internal networks. I assessed IPs and applications with automated and manual testing, then authored VAPT reports with proof-of-concept exploits and executive summaries.
As a contract CEH & SOC Cybersecurity Master Trainer at Offensive Security Bangladesh Ltd., I trained professionals on CEH v12 and SOC operations and built SOC simulations for email threats, APT scenarios, honeypot monitoring, and incident response. I’ve also published Google Dorks in the Google Hacking Database and solved CTF challenges on HackTheBox, TryHackMe, and PentesterLab.
