mohd Haji
@mohdhaji
Offensive and application security engineer with 10+ years experience securing cloud, web, and AI systems.
IndiaWhat I'm looking for
I am an offensive and application security engineer with over 10 years of InfoSec experience, including 8+ years in corporate services and product environments. I focus on pentesting, secure development, and cloud security across AWS and Azure.
At Fanatics I lead offensive security activities for the commerce division, run the Synack bug bounty triage, and performed pentests on internal AI chatbots and cloud assets. I’ve driven SEV incidents with SRE/SRO teams and implemented MCP servers for cybersecurity use cases.
At VMware I contributed to baseline security testing across multiple products, performed attack surface analysis, and acted as the product security "guru" responding to SDLC security issues. At Copart and COEIA I reduced application risk by finding high-severity issues, automating security tasks with Python, and delivering pentesting and training engagements.
I hold OSCP+, OSWA, and CAPen certifications, published tooling and MCP servers on GitHub, and have a long history of bug bounty and CTF achievements. I seek roles where I can continue to harden modern applications, cloud environments, and AI systems while mentoring teams and automating security.
Experience
Work history, roles, and key accomplishments
FAConducts manual and automated penetration tests of Fanatics cloud environments (Azure, AWS) and AI chatbots, triages the Synack bug bounty program, and leads security incident response and remediation efforts across commerce assets.
VMPerformed baseline security testing and attack-surface analysis for VMware products (Workspace ONE, Horizon, HCX, VRLI), conducted code reviews and cross-functional remediation, and served as a security point-of-contact within a large VSecr team.
Application Security Engineer
Copart
Jan 2020 - Jan 2022 (2 years)
Performed web and mobile application penetration tests across multiple countries, reported and drove remediation of high-risk findings, and implemented automation scripts to integrate security scans into CI/CD pipelines.
Information Security Specialist
Center Of Excellence In Information Assurance
Sep 2017 - Apr 2019 (1 year 7 months)
Conducted internal and external penetration tests for clients (including government entities) for ISO 27001 compliance, developed pentesting training materials, and delivered awareness talks on application security.
Education
Degrees, certifications, and relevant coursework
CTChaitanya Bharathi Institute of Technology
Bachelor of Engineering, Computer Science Engineering
2013 - 2017
Grade: 7.8 GPA
Completed Bachelor of Engineering in Computer Science Engineering with First Division and a 7.8 GPA.
Availability
Location
IndiaAuthorized to work in
Portfolio
github.com/mohdhaji87/Shodan-MCPJob categories
Skills
Interested in hiring mohd?
You can contact mohd and 90k+ other talented remote workers on Himalayas.
Message mohdFind your dream job
Sign up now and join over 100,000 remote workers who receive personalized job alerts, curated job matches, and more for free!
