Open to opportunities

Sana Rehman

@sanarehman

Message

I test banking systems and web applications to uncover and remediate security vulnerabilities.

Pakistan

Message

What I'm looking for

I'm looking for an opportunity to grow in penetration testing, vulnerability assessment, application security, or SOC operations while working on real-world security engagements with experienced InfoSec professionals.

I've supported penetration testing and SOC threat monitoring on live banking infrastructure at BankIslami Pakistan Limited, documenting findings, proof-of-concept evidence, and remediation recommendations for engineering and risk stakeholders.

I've also reverse engineered Android applications at the National Centre for Cyber Security, built the Python-based Recon-Master reconnaissance tool, and researched vulnerabilities across web, API, mobile, and binary targets. My hands-on work covers OTP bypasses, JWT flaws, XSS, SSTI, CORS misconfigurations, Android testing, and red team simulations, and I placed third in the ACM SigSAG CTF.

Experience

Work history, roles, and key accomplishments

Cybersecurity Intern, InfoSec

BankIslami Pakistan Limited

Jun 2026 - Aug 2026 (2 months)

Conducted internal website penetration testing and vulnerability assessments on live banking infrastructure, applying OWASP Top 10 methodology. Monitored and triaged SOC alerts in Elastic SIEM, and documented findings for stakeholders.

Penetration Testing Vulnerability Assessment OWASP Top 10 Burp suite Nmap Wireshark Metasploit Nessus Nuclei Nikto WPScan Hydra Gobuster Sqlmap

Cybersecurity Intern

National Centre for Cyber Security (NCCS)

Aug 2025 - Dec 2025 (4 months)

Performed static reverse engineering of an Android application using JADX and Ghidra, identifying structural security weaknesses. Designed and executed red team simulations and contributed to security policy documentation.

Reverse Engineering Ghidra Red Team Security Policy Android Security