Looking for a job

Ameer Hamza

@penetrationtesting

Message

Senior IT security engineer specializing in application, cloud, and red team operations.

Pakistan

Message

What I'm looking for

I seek roles where I can lead application and cloud security testing, work in collaborative security teams, and drive measurable remediation and resilience improvements.

I am a Senior Penetration Tester and Security Engineer with strong expertise in application and cloud security, led red team engagements and aligned testing with ISO 27001 and ISO 27034 across the SDLC.

I have driven vulnerability assessments and penetration tests for large platforms (HiringThing, Eventbrite, Anthology/Blackboard, HireRight), finding and helping remediate critical authentication, access control, API, and infrastructure issues that reduced client bug reporting and strengthened platform security.

I combine hands-on offensive skills (web, mobile, API, network, AD, cloud, container security), tooling proficiency (Burp Suite, Nmap, Metasploit, Cobalt Strike, Nessus, Acunetix, Postman), and scripting (Python, Bash) with a continuous bug-bounty practice and certifications to deliver measurable security improvements.

Experience

Work history, roles, and key accomplishments

Current

Senior Penetration Tester

Current

Hackersray

Mar 2020 - Present (6 years 3 months)

Led application and infrastructure security testing for global platforms, reducing client bug reports by 60% and delivering actionable remediation across web, API, mobile, and cloud systems.

Penetration Testing Vulnerability Assessment Burp suite Python Cloud Security Cobalt Strike Metasploit

Current

Bug Bounty Hunter

Current

Bugcrowd

Jan 2018 - Present (8 years 5 months)

Performed comprehensive vulnerability assessments for large-scale platforms, discovering high-impact flaws including session hijacking and privilege escalation affecting millions of users.

Bug Bounty Burp suite Nmap Nessus API Testing OWASP ZAP