Open to opportunities

Mahnoor Aftab

@mahnooraftab2

Threat intelligence and OSINT researcher producing open-source threat reports for security teams and global enterprise customers.

United States

Message

What I'm looking for

I’m looking to keep building threat intelligence through deep OSINT research—authoring reports and alerts that help security teams track adversaries and improve finished intelligence for enterprise customers.

I’ve worked as a remote security researcher at CrowdStrike, digging into deep open-source investigations to track and profile hacktivist groups and targeted intrusion activity. I’ve monitored underground communities and forums to understand adversary motivations and TTPs, and I’ve authored threat intelligence reports and proactive alerts used internally.

Before that, I interned as an Intelligence Analyst Intern, where I set up a secure virtual research station for in-depth OSINT on regional threat actors. I enforced OPSEC frameworks, synthesized raw threat feeds, and produced structured threat assessment reports using multilingual capabilities.

Earlier, I built secure front-end and back-end instances on AWS and contributed to a web application cybersecurity policy at Agile Project Advisors LLC. I’m also co-founder and president of the Loyola University Chicago Women In Cybersecurity (WiCyS) chapter, helping run events, training initiatives, and board operations.

Experience

Work history, roles, and key accomplishments

Current

Research Analyst

Current

Project Khthon

Feb 2026 - Present (6 months)

Leveraged OSINT, SATINT, and GEOINT methodologies to locate anomaly signatures and mass graves in active global conflict zones. Authored open-source findings into detailed intelligence assessments published for public dissemination.

OSINT SATINT GEOINT Threat Analysis

Security Researcher

CrowdStrike

Feb 2025 - Jul 2026 (1 year 5 months)

Conducted deep open-source investigations to track and profile hacktivist groups and targeted intrusion (APTs), mapping regional adversary behavior to global campaigns. Monitored underground communities and forums to analyze adversary motivations and TTPs.

OSINT Threat Intelligence GitHub

Intelligence Analyst Intern

CrowdStrike

Jun 2024 - Jan 2025 (7 months)

Established and maintained secure virtual research station for open source investigations on regional threat actors. Synthesized raw threat feeds and produced structured threat assessment reports.

OSINT OPSEC Threat Analysis Threat Assessment

Software Developer

Agile Project Advisors LLC

Aug 2023 - Dec 2023 (4 months)

Architected secure front-end and back-end instances on AWS, built website front-end using Python and Github. Researched and drafted web application cybersecurity policy to safeguard user PII.

AWS Python GitHub Cybersecurity Policy