Skip to main content
Rana Uzair AhmadRA
Looking for a job

Rana Uzair Ahmad

@ranauzairahmad1

I secure CI/CD pipelines and lead penetration testing across applications and infrastructure.

Pakistan
Message

What I'm looking for

I'm looking to build and secure systems where I can combine offensive security, DevSecOps automation, and security tool development, while working closely with engineering teams on meaningful security outcomes.

At Zerox Innovation, I integrate security controls into GitHub Actions and Jenkins pipelines, automate SAST/DAST scanning, and lead vulnerability lifecycle management from CVSS triage through remediation.

I conduct full-scope penetration tests across web applications, APIs, internal networks, and external perimeters. I translate findings into actionable reports and work with development teams to embed OWASP Top 10 and secure SDLC practices upstream.

I've built 34+ open-source tools, including RCMS for remote infrastructure management, CyberGuard Agent for real-time SIEM monitoring, and NetSnoop for packet analysis. My tooling spans Python, C, React.js, Docker, and security automation.

I bring hands-on offensive security experience sharpened through CTF competition, a Top 3% global TryHackMe ranking, and a Top 900 HackTheBox professional rank. I also built a C-based SIEM agent deployed in live government infrastructure at NCCS.

Experience

Work history, roles, and key accomplishments

ZL
Current

Penetration Tester

Zerox Innovation (Pvt.) Ltd.

Apr 2024 - Present (2 years 5 months)

Conducted full-scope red team engagements across web applications, APIs, internal networks, and external perimeters; delivered CVSS-rated reports with actionable remediation guidance. Performed API security testing using Postman and REST Assured, and integrated custom scanning scripts into GitLab CI pipelines.

IN
Current

Freelance Penetration Tester

Independent

Apr 2023 - Present (3 years 5 months)

Conducted independent web application and network penetration testing engagements for clients, delivering risk-rated security assessment reports with prioritized remediation steps. Built and maintained custom offensive security tooling in Python and C to support reconnaissance, exploitation, and reporting workflows.

Education

Degrees, certifications, and relevant coursework

Air University logoAU

Air University

Bachelor of Science, Cyber Security

2023 -

Grade: 3.33 / 4.0

Pursuing a Bachelor of Science in Cyber Security with a GPA of 3.33 out of 4.0, expected to graduate in 2027.

Coursera logoCO

Coursera

CompTIA PenTest+ Preparation Course Certificate, Penetration Testing

Completed the CompTIA PenTest+ Preparation Course Certificate.

AR

arcX

Cyber Threat Intelligence 101, Cyber Threat Intelligence

Completed the Cyber Threat Intelligence 101 certification.

CL

CSI Linux

CSI Linux Certified Investigator (CSIL-CI), Digital Forensics

Earned the CSI Linux Certified Investigator (CSIL-CI) certification.

RE

REMASM+

Mastering Reverse Engineering and Malware Analysis (REMASM+), Reverse Engineering and Malware Analysis

Completed the Mastering Reverse Engineering and Malware Analysis (REMASM+) certification.

NN

National Center of Cyber Security (NCCS)

Digital Forensics, Digital Forensics

Completed the Digital Forensics certification.

Udemy logoUD

Udemy

Web Application Security, Web Application Security

Completed the Web Application Security certification.

Get matched with your dream remote job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan