Open to opportunities

NASEEF Moh

@naseefmoh

Message

Cybersecurity SOC Analyst skilled in VAPT, log analysis, and threat detection.

India

Message

What I'm looking for

I’m looking for a cybersecurity role where I can combine SOC log analysis with VAPT-driven improvements—building detections, validating vulnerabilities with strong documentation, and growing fast with a team that values real threat reduction.

I’m an EC-Council Certified SOC Analyst specializing in Vulnerability Assessment and Penetration Testing (VAPT) across Web, API, and Mobile Application Security environments. I work with tools like Burp Suite, Metasploit, and Nmap, with working knowledge of OWASP Top 10, NIST, and SANS frameworks.

In my recent experience, I executed DAST assessments for web and API targets, validated exploitability to reduce false positives, and prioritized findings by risk severity. I also built hands-on detection capabilities through Active Directory security lab work, coordinated secure issue escalation with full technical documentation, and performed log analysis to identify threat indicators—while contributing to real vulnerability research through responsible disclosure.

Experience

Work history, roles, and key accomplishments

Cybersecurity Apprentice

Keltron (Kerala State Electronics Development Corporation Lt

Jun 2025 - Jan 2026 (7 months)

Executed DAST assessments across web and API environments using Burp Suite and Nmap, validating exploitability conditions and prioritizing findings by risk severity aligned to OWASP Top 10. Designed an Active Directory security lab (authentication mechanisms, privilege escalation, and NTLM/Kerberos abuse) and coordinated issue escalation with technical documentation.

DAST Burp suite Nmap API Security Vulnerability Assessment OWASP Top 10 Active Directory Security Kerberos Attack Chain Documentation Reproduction Steps Incident Escalation

Cybersecurity Intern

Red Team Hacker Academy

Jan 2024 - Jan 2025 (1 year)

Conducted log analysis across HTTP/HTTPS and network traffic streams using Linux-based tools to identify threat indicators and suspicious activity. Performed responsible vulnerability disclosure via Bugcrowd and authored structured investigation reports including attack vectors, evidence, risk assessment, and remediation actions.

Log Analysis Threat Detection Linux HTTPS Bugcrowd Risk Assessment remediation