Open to opportunities

Md Sariful Islam

@mdsarifulislam

Message

Cybersecurity & penetration tester specializing in infrastructure protection and vulnerability remediation.

India

Message

What I'm looking for

I seek hands-on roles in offensive security or infrastructure defense where I can harden systems, lead vulnerability remediation, and apply OT/hardware security expertise within compliance-driven teams.

I am a cybersecurity professional with hands-on experience securing critical infrastructure, having implemented UEFI Secure Boot, hard disk encryption, and achieved PCI‑DSS and NIST compliance across 250+ ATMs. My background in electronics and UPS/OT systems enhances hardware and operational security analysis, and I consistently reduce attack surfaces through system hardening, firmware management, and incident response.

During internships and lab assessments I identified and remediated numerous web and network vulnerabilities (SQLi, XSS, CSRF, IDOR), ranked in the top 15% of CTF participants, and executed forensic and threat analysis to drive measurable security improvements. I work with tools like Wireshark, Burp Suite, OWASP ZAP, and Kali Linux, and hold multiple industry certifications including CEH, SSCP, and several vendor/academy cybersecurity credentials.

Experience

Work history, roles, and key accomplishments

Cyber Security Intern

Hacktify Cyber Security

Mar 2025 - Jul 2025 (4 months)

Conducted vulnerability analysis and penetration testing in lab environments, identifying and mitigating 50+ web flaws across weekly CTFs and reducing vulnerabilities by ~30% through continuous assessments and forensics.

Vulnerability Assessment Penetration Testing OWASP ZAP Burp suite OSINT Incident Response Kali Linux

Cyber Security Intern

The Red Users

Oct 2024 - Nov 2024 (1 month)

Configured network defenses and remediated web application vulnerabilities, implementing WPA2/3 and firewall rules that reduced unauthorized access by 60% and improved app security by 40%.

Network Security OWASP ZAP Burp suite Web Security Incident Response Wireshark

Customer Engineer

NCR Corporation

Jul 2022 - May 2023 (10 months)

Hardened ATM infrastructure via UEFI Secure Boot and HDE deployment across 250+ ATMs, reducing firmware vulnerabilities 40% and blocking 100+ unauthorized executions while maintaining PCI-DSS compliance.

Hard Disk Encryption BIOS Updates PCI DSS Endpoint Protection Solidcore Incident Response

Customer Engineer

Probox Infotech Pvt. Ltd

Jul 2021 - Jun 2022 (11 months)

Managed endpoint and disk encryption across 450+ ATMs, reducing OS failures by 30% and supporting forensic investigations for 80+ skimming incidents while maintaining 96% network uptime.

Endpoint management PCI DSS Wireshark Group Policy Forensics

Field Service Engineer

Teletech Solutions

Jan 2021 - Jun 2021 (5 months)

Serviced DC power systems and backup batteries across 50+ telecom sites, improving uptime to 99.9% and reducing tower downtime 30% via preventive maintenance and rapid fault resolution.

DC Power Safety Compliance Documentation

Service Engineer

G P Tronics Pvt Ltd

Feb 2019 - Nov 2020 (1 year 9 months)

Installed and maintained Vertiv/Emerson UPS systems (1–40KVA), achieving 95%+ emergency breakdown resolution and improving UPS efficiency by 15% through preventive maintenance and battery health management.

Battery Testing Vertiv Emergency Repairs SLA Management

PCB Assembly Engineer

Luminous Power Technology

Aug 2017 - Jan 2019 (1 year 5 months)

Performed precision PCB assembly and power component testing, maintaining a 99.8% first-pass yield and reducing field failures 35% through thorough burn-in and QA processes.

IGBTs MOSFETs Power Testing Quality Assurance ERP Documentation