Open to opportunities

Muhammad Ashhab Khan

@muhammadashhabkhan

Message

Skilled Information Security Specialist with over 7 years of experience.

Pakistan

Message

What I'm looking for

I seek a role that allows me to leverage my expertise in security while contributing to community safety and awareness.

I am a dedicated Information Security Specialist with over 7 years of experience in the field, specializing in configuration reviews, vulnerability management, and penetration testing. My journey has taken me through various roles, where I have honed my skills in cloud security, IoT hacking, and web application security testing. I pride myself on my ability to identify, analyze, and resolve complex security threats, ensuring that organizations can operate securely in an increasingly digital world.

Currently, I serve as a Senior Information Security Specialist at u-blox, where I lead vulnerability management and oversee cloud security initiatives. My previous roles have allowed me to develop custom security scripts, conduct thorough threat and risk analyses, and implement robust IT security policies. I am passionate about sharing my knowledge and experience, which is why I actively engage in educating teams through phishing simulations and security awareness programs.

Experience

Work history, roles, and key accomplishments

U-

Current

Senior Information Security Specialist

Current

u-blox

Aug 2021 - Present (3 years 9 months)

Led vulnerability management and BugCrowd programs, focusing on cloud security and IoT product testing. Conducted penetration testing and performed Threat and Risk Analysis for automotive standards. Regularly conducted phishing simulations to educate the workforce.

Vulnerability Management Cloud Security Penetration Testing Security Analysis Phishing IoT AWS Azure Bugcrowd Risk Management

Penetration Tester

Gaditek

Jan 2020 - Jul 2021 (1 year 6 months)

Conducted NGFW testing and deployed PAM solutions while managing API penetration testing. Developed custom security scripts to automate vulnerability identification, enhancing security protocols for operations.

Penetration Testing API Security Security Automation Cisco Fortinet

IT Security Analyst

Central Asian Cellular Forum

Jul 2018 - Jan 2020 (1 year 6 months)

Authored and implemented an IT Security Policy while leading web and mobile application security assessments. Conducted secure SDLC reviews and designed a social engineering training program to enhance internal security awareness.

Security Policy Web Security Mobile Security SDLC Code Review Security Reviews Risk Management

Management Trainee (Cyber Security Ops)

Pakistan Telecommunication Authority (PTA)

Dec 2016 - Dec 2017 (1 year)

Gained practical experience in IT support and network security, handling NOC requests and reviewing national web content. Assisted in strengthening network infrastructure by identifying security threats.

IT Support Network Security Web Content Management Compliance Telecommunications Risk Assessment Incident Response

Education

Degrees, certifications, and relevant coursework

COMSATS Institute of Information Technology

Bachelor of Science, Computer Science

2012 - 2016

Completed a Bachelor of Science in Computer Science, focusing on various aspects of computing, programming, and software development. Developed a strong foundation in algorithms, data structures, and system design.