# Jibran Rashid Bhat

Jibran Rashid Bhat is a remote worker on Himalayas, Freelance VAPT consultant at Freelance, based in India.

Source: https://himalayas.app/@jibranrashidbhat

```text
Vulnerability management and VAPT specialist across enterprise environments; built risk-based remediation plans and validated fixes.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | India |
| Authorized to work in | India |
| Salary expectations | 20k+ EUR |
| Job categories | Vulnerability Management Analyst, Vulnerability Assessment Analyst, Penetration Tester, Cyber Security Architect |
| Skills | Vulnerability Management, Vulnerability Assessment, Vulnerability Scanning, Vulnerability Prioritization, Vulnerability Remediation, Vulnerability Validation, Vulnerability Testing, Vulnerability Intelligence, Vulnerability Reports, CVE Lifecycle Management, Attack Surface Management, VAPT, Penetration Testing, Security Assessments, Security Architecture |

## What I'm looking for

```text
I’m seeking cybersecurity work focused on vulnerability management, security assessment and infrastructure security, where I can identify and prioritize exposure, drive remediation, and strengthen enterprise security posture.
```

## About

```text
At Mau Bank (Headwy consulting), I led vulnerability management and security assessment programs across enterprise infrastructure, from Windows and Linux servers to VMware, Oracle Database, NetScaler ADC and Citrix Gateway. I used tools including Tenable Nessus, Qualys, Burp Suite, Nmap, Postman and Metasploit to assess findings and support remediation.

At The Bridgeway, I led vulnerability management and security assessments and designed and reviewed security architecture aligned with NIST, PCI DSS and ISO 27001. I also conducted threat modelling with STRIDE and DREAD and reviewed AWS, Azure and GCP security architecture.

At Wipro, I worked on vulnerability assessments across cloud and open-source technologies, including AWS, Azure, GCP, Linux, Kubernetes and Docker. I prioritized risks using CVSS, EPSS, CISA KEV status, exploit availability, asset criticality and external exposure.

Earlier, at DXC Technology and Tek systems (HPE), I supported vulnerability lifecycle tracking, reporting and infrastructure security assessments. I began at BSNL. Srinagar, J&K, assisting with vulnerability scanning, CVE analysis, validation and remediation tracking; I also proposed a final-year thesis on a SCADA data acquisition system.
```

## Experience

### Freelance VAPT consultant

Freelance. Nov 2025 - Oct 2026

```text
Independently conducted end-to-end VAPT engagements, applying black box, white box, and grey box testing techniques. Performed vulnerability intelligence research, CPE mapping, and prepared enterprise-grade audit reports.
```

Skills: VAPT, Penetration-Testing, CVSS, EPSS, CPE, CVE, Vulnerability-Assessment, Threat-Intelligence, remediation, Audit-Reporting

### Senior IT Manager - VAPT

Mau Bank (Headwy consulting). Nov 2024 - Nov 2025

```text
Led end-to-end Vulnerability Management and Security Assessment programs across enterprise infrastructure. Conducted vulnerability discovery, analysis, and remediation tracking using Tenable Nessus, Qualys, Burp Suite, and other tools.
```

Skills: Vulnerability-Management, Security-Assessments, Tenable-Nessus, Qualys, Burp-suite, Nmap, Metasploit, CVSS, EPSS, Threat-Intelligence, remediation, GCP

### CYBER SECURITY VAPT and ARCHITECT

The Bridgeway. Jan 2024 - Nov 2024

```text
Led end-to-end Vulnerability Management and Security Assessment programs, designed and reviewed enterprise security architecture aligned with NIST, PCI DSS, and ISO 27001. Conducted threat modelling using STRIDE and DREAD, and performed cloud security architecture reviews.
```

Skills: Vulnerability-Management, Security-Architecture, NIST, PCI-DSS, ISO-27001, Threat-Modeling, STRIDE-Model, DREAD, AWS, Azure, GCP, Cryptographic-Assessments

### ENGINEER – CYBER SECURITY VAPT

[Wipro](https://himalayas.app/companies/wipro-limited). Oct 2022 - Jan 2024

```text
Worked on vulnerability assessment across cloud and open-source technologies, including AWS, Azure, GCP, Linux, Kubernetes, Docker, Apache, NGINX, and OpenSSL. Applied threat-informed vulnerability prioritization and performed risk-based vulnerability management.
```

Skills: Vulnerability-Assessment, Cloud-Security, AWS, Azure, GCP, Linux, Kubernetes, Docker, Detection-and-Response-(VMDR)-Platforms, Rapid7-InsightVM, CVSS, EPSS, CISA-KEV, Nmap, Masscan, Shodan

### CYBER SECURITY SPECIALIST- VAPT

[DXC Technology](https://himalayas.app/companies/dxc-technology). Dec 2021 - Oct 2022

```text
Assessed software versions against vendor support lifecycles, identified EOL/EOS products, and evaluated patch applicability. Prepared vulnerability assessment reports and supported enterprise vulnerability management operations.
```

Skills: Vulnerability-Management, Patch-Management, CVE, CVSS, remediation, SLA-Management, ServiceNow, Reporting, Governance

### Tier 1 - VAPT analyst

Tek systems (HPE). Apr 2019 - Dec 2021

```text
Conducted on-premises and cloud infrastructure security assessments, assessed VPN configurations, cryptographic ciphers, firewalls, Active Directory, DNS, DHCP, and Group Policy. Prepared design documentation and performed black-box security assessments.
```

Skills: VAPT, Penetration-Testing, Infrastructure-Security, VPN, Firewalls, Active-Directory, Palo-Alto, Checkpoint, Cisco, Barracuda, IPS

### Cybersecurity Intern

BSNL. Apr 2018 - Apr 2019

```text
Assisted with vulnerability scanning, scan policy configuration, assessment data analysis, and vulnerability reporting using Tenable. Supported vulnerability assessment activities and analyzed CVEs using CVSS, EPSS, and CISA KEV.
```

Skills: Vulnerability-Scanning, Tenable, CVSS, EPSS, CISA-KEV, Threat-Intelligence, SOC, SIEM

## Education

### Islamic University of Science and Technology

Bachelor of Technology, Engineering. Grade: 6.17

```text
Completed Bachelor of Technology (B.Tech) with a CGPA of 6.17.
```

### Shivjyoti Senior Secondary School

Higher Secondary, General. Grade: 71%

```text
Completed 12th grade with 71% marks.
```

### Delhi Public School

Matriculation, General. Grade: 9 CGPA

```text
Completed matriculation with 9 CGPA.
```

## Tech stack

- Postman
- Splunk
- Tableau
- Kubernetes
- Stride
- Jira
- Python
- PowerShell
- Linux
- Windows Server
- Confluence
- OpenSSL
- Qualys
- Tenable.sc
- Docker
- NGINX
- Citrix Gateway
- SQL
- VMware ESXi
- ServiceNow
- Burp Suite
- Nmap
- Metasploit
- Wiz
- Bash
- Power BI
- AWS
- Microsoft Sentinel
- Azure

To contact Jibran, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [P AJITH](https://himalayas.app/@pajith): Security Engineer, Wipro Limited
- [Shanu Sharma](https://himalayas.app/@shanusharma1): Technology Security Senior Analyst, NAB Innovation Centre India
- [Sourave Singh](https://himalayas.app/@souravesingh): Associate Security Consultant, ControlCase
- [gurpreet kaur](https://himalayas.app/@gurpreetkaur5): Associate Consultant, Kroll
- [Ashwin Kannamvelly](https://himalayas.app/@ashwinkannamvelly): Independent Security Researcher, Bugcrowd
- [Rahul Banik](https://himalayas.app/@rahulbanik): VAPT Engineer, Reliance Jio
- [Manoj Korekka](https://himalayas.app/@manojkorekka): Lead Security Consultant, Guidewire Software
- [Bunty Saini](https://himalayas.app/@buntysaini): Information Security Analyst, Globaltech & Infosec (GTIS)
- [Pratap Roy](https://himalayas.app/@prataproy): Senior Managed Service Specialist (Team Lead), Accenture Technologies
- [Madhusudana C S](https://himalayas.app/@madhusudanacs): Cyber Security Architect, Wipro Limited