Looking for a job

marzieh mahmoodi

@marziehmahmoodi

Message

Experienced Cyber Security Engineer with a strong focus on risk reduction.

Iran

Message

What I'm looking for

I am looking for a role that fosters innovation and collaboration, with opportunities for professional growth and impactful security initiatives.

I am a dedicated Cyber Security Engineer with a proven track record in minimizing security risks and enhancing software resilience. My experience includes conducting comprehensive web and network penetration tests, which have successfully addressed over 25 critical vulnerabilities, resulting in a 40% reduction in security risks. I have developed Python-based automation tools that have significantly improved threat detection accuracy by 45% while reducing manual testing efforts by 60%.

Throughout my career, I have built and launched Iran's first native secure router, implementing a multi-layered defense system that mitigated 90% of attack vectors. My expertise in CI/CD pipelines has accelerated development processes by 40%, cutting review times by half. I am passionate about leveraging offensive security assessments and secure software development practices to create robust security frameworks that protect organizations from evolving threats.

With a strong foundation in both technical and soft skills, I have conducted numerous secure coding training sessions, improving adherence to security best practices among teams. I am committed to continuous learning and staying updated with the latest security methodologies to ensure the highest standards of security compliance and risk management.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Engineer

Current

Pouya-Energy-Arta-Iranian

Oct 2024 - Oct 2024 (0 months)

 Minimized security risks by 40% via comprehensive web and network penetration tests, addressing 25+ critical vulnerabilities.
 Bolstered software resilience through static and dynamic code analysis, resolving 80+ security flaws.
 Engineered Python-based automation tools for threat detection, reducing manual testing efforts by 60% and boosting detection accuracy by 45%

Software Security Engineer

Part Software Group

Jul 2024 - Oct 2024 (3 months)

Strengthened source code protection by 70% through developing 10+ custom Semgrep rules, optimizing vulnerability detection

DevSecOps Engineer

Zharfpouyan Company

Mar 2021 - Mar 2023 (2 years)

Led DevSecOps initiatives resulting in the launch of Iran’s first native secure router, mitigating 90% of attack vectors. Streamlined CI/CD pipelines with integrated SAST/DAST tools, boosting development speed by 40% and reducing release time by 30%. Automated penetration testing and incident response, cutting manual effort by 50% and halving resolution time.

Network Security Engineer

Zharfpouyan Company

May 2017 - Mar 2021 (3 years 10 months)

Conducted 50+ security assessments and remediated 100+ weaknesses, reducing breach risk by 40% and critical threats by 55%. Enhanced system hardening, blocked 70% of unauthorized access, and improved ISO 27001 compliance by 90%. Standardized security across 10+ device brands and optimized documentation, boosting audit efficiency by 30%.