Looking for a job

Rashid Asrar

@rashidasrar

India

Message

What I'm looking for

I seek penetration testing or security research roles focused on web, API, and mobile vulnerabilities, where I can scale assessments, ship tooling, and work with security-first teams to remediate critical issues.

𝗣𝗲𝗻𝗲𝘁𝗿𝗮𝘁𝗶𝗼𝗻 𝘁𝗲𝘀𝘁𝗲𝗿 𝗮𝗻𝗱 𝗮𝗰𝘁𝗶𝘃𝗲 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗿𝗲𝘀𝗲𝗮𝗿𝗰𝗵𝗲𝗿 𝗿𝗲𝗰𝗼𝗴𝗻𝗶𝘇𝗲𝗱 𝗯𝘆 𝗡𝗔𝗦𝗔 & 𝗨𝗦𝗔𝗖 𝗳𝗼𝗿 𝗿𝗲𝘀𝗽𝗼𝗻𝘀𝗶𝗯𝗹𝘆 𝗱𝗶𝘀𝗰𝗹𝗼𝘀𝗶𝗻𝗴 𝗮 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗳𝗹𝗮𝘄 𝘁𝗵𝗿𝗼𝘂𝗴𝗵 𝗕𝘂𝗴𝗰𝗿𝗼𝘄𝗱’𝘀 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗗𝗶𝘀𝗰𝗹𝗼𝘀𝘂𝗿𝗲 𝗣𝗿𝗼𝗴𝗿𝗮𝗺. 𝗦𝗸𝗶𝗹𝗹𝗲𝗱 𝗶𝗻 𝗼𝗳𝗳𝗲𝗻𝘀𝗶𝘃𝗲 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆, 𝗺𝗮𝗻𝘂𝗮𝗹 𝗲𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗮𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁𝘀 𝗮𝗰𝗿𝗼𝘀𝘀 𝘄𝗲𝗯, 𝗔𝗣𝗜, 𝗻𝗲𝘁𝘄𝗼𝗿𝗸𝘀 𝗮𝗻𝗱 𝗺𝗼𝗯𝗶𝗹𝗲 𝗲𝗻𝘃𝗶𝗿𝗼𝗻𝗺𝗲𝗻𝘁𝘀 (𝗔𝗻𝗱𝗿𝗼𝗶𝗱) 𝘄𝗶𝘁𝗵 𝗮 𝘀𝘁𝗿𝗼𝗻𝗴 𝗰𝗼𝗺𝗺𝗮𝗻𝗱 𝗼𝗳 𝗢𝗪𝗔𝗦𝗣 𝗧𝗼𝗽 𝟭𝟬 𝗿𝗶𝘀𝗸𝘀 𝗶𝗻𝗰𝗹𝘂𝗱𝗶𝗻𝗴 𝗫𝗦𝗦, 𝗜𝗗𝗢𝗥, 𝗙𝗶𝗹𝗲 𝘂𝗽𝗹𝗼𝗮𝗱𝘀, 𝟬-𝗖𝗹𝗶𝗰𝗸 𝗔𝗰𝗰𝗼𝘂𝗻𝘁 𝘁𝗮𝗸𝗲𝗼𝘃𝗲𝗿, 𝗖𝗦𝗥𝗙, 𝗦𝗤𝗟/𝗛𝗧𝗠𝗟 𝗜𝗻𝗷𝗲𝗰𝘁𝗶𝗼𝗻𝘀 𝗮𝗻𝗱 𝗮𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗳𝗹𝗮𝘄𝘀. 𝗘𝘅𝗽𝗲𝗿𝗶𝗲𝗻𝗰𝗲𝗱 𝗶𝗻 𝗱𝗶𝘀𝗰𝗼𝘃𝗲𝗿𝗶𝗻𝗴 𝗮𝗻𝗱 𝗿𝗲𝗽𝗼𝗿𝘁𝗶𝗻𝗴 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝘄𝗶𝘁𝗵 𝗽𝗿𝗼𝗳𝗶𝗰𝗶𝗲𝗻𝗰𝘆 𝗶𝗻 𝘁𝗼𝗼𝗹𝘀 𝘀𝘂𝗰𝗵 𝗮𝘀 𝗕𝘂𝗿𝗽 𝗦𝘂𝗶𝘁𝗲, 𝗡𝗺𝗮𝗽, 𝗡𝗶𝗸𝘁𝗼, 𝗢𝗪𝗔𝗦𝗣 𝗭𝗔𝗣, 𝗢𝗽𝗲𝗻𝗩𝗔𝗦, 𝗥𝗮𝗽𝗶𝗱𝟳 𝗮𝗻𝗱 𝘀𝗰𝗿𝗶𝗽𝘁𝗶𝗻𝗴 𝗶𝗻 𝗕𝗮𝘀𝗵.

Experience

Work history, roles, and key accomplishments

Current

Security Consultant

Current

CyberFort Tech

Feb 2025 - Present (9 months)

• Performed comprehensive VAPT across web, network and cloud environments identifying critical vulnerabilities aligning with OWASP/CVSS.
• Collaborated with SOC and DevOps teams to ensure effective remediation and improve overall security.
• Performed reconnaissance, enumeration, exploitation and post exploitation activities using tools such as Burp Suite, Nmap, Metasploit and custom scripts.

Python SQL JavaScript Burp suite Kali Linux Nmap OWASP Top 10 SAST DAST Network Security API Testing Bash Scripting SaaS PaaS Sqlmap Metasploit

Sr Technical Advisor I

Concentrix

Apr 2023 - Present (2 years 7 months)

Implemented governance policies and security measures to ensure compliance and data protection. Managed user provisioning, access rights, and permissions for efficient administration.

Governance Data Protection Compliance User Provisioning Access Management

Cybersecurity Intern

Talakunchi Networks Pvt Ltd

Jan 2022 - Present (3 years 10 months)

Performed manual and automated authentication bypass and credential attacks on internal applications. Conducted network reconnaissance to identify open ports and insecure services, leveraging findings to demonstrate potential impact.

Penetration Testing Vulnerability Assessment