Muhammad Osama

I’m a Cyber Security Practitioner and Security Consultant with a demonstrated history of working in the information security industry. I focus on helping organizations build secure software and deliver confidence to users and stakeholders.

In my current role as a Senior IT Security Engineer – Security Consultant, I collaborate across divisions to design secure, scalable, and resilient IT systems. I direct information security operations and infrastructure for multiple divisions, adapting security strategies to meet distinct environments and business needs.

I help teams strengthen security through GRC and hands-on technical control implementation across applications, source code, and cloud/on-premises infrastructure. I conduct regular vulnerability assessments and penetration testing, support incident response, and ensure alignment with standards like ISO27001, NIST, and SOC2.

Previously, I led offensive security as a Team Lead and then Manager, managing the full life cycle of security testing and secure software development. I also provided digital forensics, compromise assessments, and red teaming, including social engineering, password cracking, and phishing simulation—pairing execution with real remediation guidance.