Looking for a job

Jibran Rashid Bhat

@jibranrashidbhat

Vulnerability management and VAPT specialist across enterprise environments; built risk-based remediation plans and validated fixes.

India

Message

What I'm looking for

I’m seeking cybersecurity work focused on vulnerability management, security assessment and infrastructure security, where I can identify and prioritize exposure, drive remediation, and strengthen enterprise security posture.

At Mau Bank (Headwy consulting), I led vulnerability management and security assessment programs across enterprise infrastructure, from Windows and Linux servers to VMware, Oracle Database, NetScaler ADC and Citrix Gateway. I used tools including Tenable Nessus, Qualys, Burp Suite, Nmap, Postman and Metasploit to assess findings and support remediation.

At The Bridgeway, I led vulnerability management and security assessments and designed and reviewed security architecture aligned with NIST, PCI DSS and ISO 27001. I also conducted threat modelling with STRIDE and DREAD and reviewed AWS, Azure and GCP security architecture.

At Wipro, I worked on vulnerability assessments across cloud and open-source technologies, including AWS, Azure, GCP, Linux, Kubernetes and Docker. I prioritized risks using CVSS, EPSS, CISA KEV status, exploit availability, asset criticality and external exposure.

Earlier, at DXC Technology and Tek systems (HPE), I supported vulnerability lifecycle tracking, reporting and infrastructure security assessments. I began at BSNL. Srinagar, J&K, assisting with vulnerability scanning, CVE analysis, validation and remediation tracking; I also proposed a final-year thesis on a SCADA data acquisition system.

Experience

Work history, roles, and key accomplishments

Freelance VAPT consultant

Freelance

Nov 2025 - Oct 2026 (11 months)

Independently conducted end-to-end VAPT engagements, applying black box, white box, and grey box testing techniques. Performed vulnerability intelligence research, CPE mapping, and prepared enterprise-grade audit reports.

VAPT Penetration Testing CVSS

EPSS

CPE

CVE Vulnerability Assessment Threat Intelligence remediation Audit Reporting

Senior IT Manager - VAPT

Mau Bank (Headwy consulting)

Nov 2024 - Nov 2025 (1 year)

Led end-to-end Vulnerability Management and Security Assessment programs across enterprise infrastructure. Conducted vulnerability discovery, analysis, and remediation tracking using Tenable Nessus, Qualys, Burp Suite, and other tools.

Vulnerability Management Security Assessments

Tenable Nessus

Qualys Burp suite Nmap Metasploit CVSS

EPSS

Threat Intelligence remediation GCP

CYBER SECURITY VAPT and ARCHITECT

The Bridgeway

Jan 2024 - Nov 2024 (10 months)

Led end-to-end Vulnerability Management and Security Assessment programs, designed and reviewed enterprise security architecture aligned with NIST, PCI DSS, and ISO 27001. Conducted threat modelling using STRIDE and DREAD, and performed cloud security architecture reviews.

Vulnerability Management Security Architecture NIST PCI DSS ISO 27001 Threat Modeling STRIDE Model

DREAD

AWS Azure GCP

Cryptographic Assessments

ENGINEER – CYBER SECURITY VAPT

Wipro

Oct 2022 - Jan 2024 (1 year 3 months)

Worked on vulnerability assessment across cloud and open-source technologies, including AWS, Azure, GCP, Linux, Kubernetes, Docker, Apache, NGINX, and OpenSSL. Applied threat-informed vulnerability prioritization and performed risk-based vulnerability management.

Vulnerability Assessment Cloud Security AWS Azure GCP Linux Kubernetes Docker

Detection and Response (VMDR) Platforms

Rapid7 InsightVM CVSS

EPSS

CISA KEV

Nmap

Masscan

Shodan

CYBER SECURITY SPECIALIST- VAPT

DXC Technology

Dec 2021 - Oct 2022 (10 months)

Assessed software versions against vendor support lifecycles, identified EOL/EOS products, and evaluated patch applicability. Prepared vulnerability assessment reports and supported enterprise vulnerability management operations.

Vulnerability Management Patch Management CVE CVSS remediation SLA Management ServiceNow

Reporting

Governance

Tier 1 - VAPT analyst

Tek systems (HPE)

Apr 2019 - Dec 2021 (2 years 8 months)

Conducted on-premises and cloud infrastructure security assessments, assessed VPN configurations, cryptographic ciphers, firewalls, Active Directory, DNS, DHCP, and Group Policy. Prepared design documentation and performed black-box security assessments.

VAPT Penetration Testing Infrastructure Security VPN Firewalls Active Directory

Palo Alto

Checkpoint Cisco

Barracuda

IPS

Cybersecurity Intern

BSNL

Apr 2018 - Apr 2019 (1 year)

Assisted with vulnerability scanning, scan policy configuration, assessment data analysis, and vulnerability reporting using Tenable. Supported vulnerability assessment activities and analyzed CVEs using CVSS, EPSS, and CISA KEV.

Vulnerability Scanning Tenable CVSS

EPSS

CISA KEV

Threat Intelligence SOC SIEM