Open to opportunities

Muhammad Zaid

@muhammadzaid7

Message

I test web, mobile, API, and LLM applications to uncover vulnerabilities and deliver actionable remediation.

Pakistan

Message

What I'm looking for

I'm looking for a cybersecurity role where I can test web, mobile, API, and LLM applications, strengthen offensive-security skills, and contribute clear, responsible vulnerability reporting.

I assess web and mobile applications at ITPinch, identifying vulnerabilities and delivering client-ready reports with proof-of-concept exploits, impact analysis, and remediation guidance.

I'm also a Cybersecurity Intern with Mosse Cybersecurity Institute, where I work through reconnaissance, exploitation, privilege escalation, post-exploitation, and MITRE ATT&CK-based adversary emulation in enterprise-style labs.

My hands-on focus spans web, API, mobile, and LLM application security. I've practised SQL injection, authentication bypass, IDOR, XSS, CSRF, prompt injection, insecure output handling, reverse engineering, and network reconnaissance using tools including Burp Suite, Nmap, Wireshark, SQLMap, Metasploit, MobSF, Frida, and Nuclei.

I'm a TryHackMe global top 2% participant, a Top 30 solo finisher at LITCTF 2026, and Team 349 Lead in the IEEE Computer Society Global Student Challenge 2026, where I built a taint-flow analyzer and patch generator for code-injection vulnerabilities in GitHub Actions workflows.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Intern

Current

Mosse Cybersecurity Institute

Jan 2026 - Present (7 months)

Completed structured offensive-security workstreams covering reconnaissance, exploitation, privilege escalation, and post-exploitation phases. Produced professional engagement deliverables including scoping documents, vulnerability write-ups, and executive summaries.

And Exploitation Post Exploitation Report Writing

Penetration Testing Intern

ITPinch

Dec 2025 - May 2026 (5 months)

Assessed web and mobile applications for security vulnerabilities and documented remediation guidance. Executed vulnerability assessments with Burp Suite, Nmap, Wireshark, and SQLMap using PTES-aligned methodology.

Burp suite Nmap Wireshark Sqlmap Vulnerability Assessment Web Application Security Mobile Application Security

Education

Degrees, certifications, and relevant coursework

University of the Punjab

Bachelor of Science, Computer Science

2023 -

Activities and societies: Active participant in cybersecurity workshops, technical competitions, and department-level security initiatives.

Pursuing a Bachelor of Science in Computer Science with coursework in computer networks, operating systems, information security, database systems, and algorithms.