Looking for a job

Muzammil Hussain

@muzammilhussain2

Message

Security Analyst | AppSec, VAPT, GRC | Building Open-Source Security Tools

Nepal

Message

What I'm looking for

I’m looking for Security Assurance Analyst work that supports security questionnaires, vendor assessments, and compliance reviews at scale—where I can keep assessments audit-ready and map findings to OWASP/ISO-aligned controls.

I’ve been doing VAPT and QA security work at CinemaGhar (361 Degree Media Pvt. Ltd.), running structured assessments on REST API endpoints and documenting critical auth and registration issues. I map each finding to OWASP API Top 10 risk categories and keep everything audit-ready, including remediation steps.

Alongside that, I review logs and security artifacts to validate abuse patterns (including DDoS/bot activity), correlate IP/ASN threat data, and maintain accurate technical documentation for layered controls like Redis rate limiting, device fingerprinting, and honeypot-based bot detection. I also build assessment-supporting tooling through projects like an automated OWASP API testing platform and a threat-intelligence workflow.

Experience

Work history, roles, and key accomplishments

VAPT & QA Engineer

CinemaGhar, 361 Degree Media Pvt. Ltd.

Jan 2026 - Apr 2026 (3 months)

Conducted structured security assessments of REST API endpoints, documenting critical vulnerabilities and mapping findings to OWASP API Top 10. Authored technical documentation for layered security controls and coordinated with engineering SMEs.

Burp suite OWASP Top 10 REST APIs Security Assessments Documentation Redis VoIP DDoS Mitigation

IT Intern

Islington College, ING Group

Nov 2024 - Feb 2025 (3 months)

Provided technical support for network, hardware, and software issues. Managed inventory of 100+ IT assets and assisted in network infrastructure setup and cabling.

Technical Support Network Infrastructure IT Asset Management