Open to opportunities

Muhammad Faizan

@muhammadfaizan6

Message

Cybersecurity consultant with expertise in vulnerability assessment and compliance.

United States

Message

What I'm looking for

I am looking for a role that allows me to leverage my cybersecurity expertise while fostering a culture of continuous learning and collaboration.

I am a dedicated cybersecurity professional with a strong foundation in computer science and a passion for enhancing security measures across various platforms. With a Master’s degree from the University of California, Riverside, and a Google Cybersecurity Professional Certificate, I have honed my skills in vulnerability assessment and penetration testing (VAPT) through my role as a Security Consultant at Black Duck. Here, I led VAPT operations for over 100 client projects, ensuring compliance with industry standards such as HIPAA and PCI DSS.

My experience extends beyond consulting; I have also contributed to academia as a Graduate Research Assistant, where I explored automated exploit generation to improve kernel security. Additionally, I have worked as a Cybersecurity Strategic Advisor, developing tailored policies for government entities and conducting workshops to foster cybersecurity awareness. I am committed to continuous learning and sharing knowledge, having spearheaded internal training sessions to promote best practices within my teams.

Experience

Work history, roles, and key accomplishments

Security Consultant

Black Duck

Feb 2021 - Nov 2024 (3 years 9 months)

Led VAPT operations across web, network, and mobile platforms for various industries, ensuring compliance with HIPAA and PCIDSS standards. Presented security assessments for over 100 client projects and fostered client relationships through direct communication and actionable remediation guidance.

VAPT HIPAA PCIDSS Compliance Client Relationship Management Training Risk Management Cybersecurity

Cybersecurity Strategic Advisor

Adam Smith International

Nov 2023 - Jan 2024 (2 months)

Conducted security analysis of government tax administration infrastructure, enhancing cybersecurity posture. Developed a tailored data governance policy and led workshops to promote cybersecurity awareness among government employees.

Security Analysis Cybersecurity Data Governance Training Risk Assessment Threat Modeling Compliance

Graduate Research Assistant

University of California, Riverside

Sep 2018 - Oct 2020 (2 years 1 month)

Investigated automated exploit generation for kernel security patch propagation. Extended syzkaller to effectively fuzz Linux kernels, contributing to advancements in systems security.

Syzkaller Research System Security Automation

Information Security Intern

Santander Bank

Aug 2020 - Aug 2020 (0 months)

Gained insights into GRC processes while assisting in compliance documentation. Supported the security architecture team with threat modeling and risk assessment, and developed custom plugins for Jira and Confluence to enhance security monitoring.

GRC Threat Modeling Risk Assessment Jira Confluence Security Monitoring Compliance

Research Assistant

Lahore University of Management Sciences

Jan 2016 - Jun 2018 (2 years 5 months)

Conducted research on securing IoT devices using Intel SGX to develop secure enclaves. Investigated code obfuscation methods to protect software on untrusted hosts, contributing to advancements in network security.

IoT Security Code Obfuscation Research Network Security Software Security

Education

Degrees, certifications, and relevant coursework

Google

Professional Certificate, Cybersecurity

2023 -

Completed the Google Cybersecurity Professional Certificate, gaining skills in various cybersecurity domains.

University of California, Riverside

Master of Science, Computer Science

2018 - 2020

Completed a Master of Science in Computer Science with a focus on Computer & Network Security, Operating Systems Security, and Program Analysis.

Lahore University of Management Sciences

Bachelor of Science, Computer Science

2014 - 2018

Earned a Bachelor of Science in Computer Science, covering Network Security, Program Analysis, Operating Systems, Machine Learning, and Software Engineering.