Looking for a job

Shehnaz Khan

@shehnazkhan

Cybersecurity Engineer at Muthoot Housing Finance Company Limited, leading VAPT and built an n8n tool to automate vulnerability assessments.

India

Message

At Muthoot Housing Finance Company Limited, I lead VAPT engagements across web, API, Android, and network applications, taking assessments from testing through remediation and closure. I also developed an n8n tool to automate vulnerability assessments and streamline security checks.

At R.U.D.R.A Cybersecurity Pvt. Ltd., I developed custom Nuclei templates and scripts to automate testing and reporting workflows, and used custom Semgrep rules for SAST. I also built threat models and mentored junior engineers.

Earlier, at Cipherbeam Technologies LLP, I conducted web application VAPT based on OWASP Top 10 and retested vulnerabilities to confirm remediation. My certifications include CEH, CAPIE, and AWS Certified Solutions Architect - Associate.

Experience

Work history, roles, and key accomplishments

Current

Senior Associate Manager - Information Security

Current

Muthoot Housing Finance Company Limited

Aug 2025 - Present (1 year 2 months)

Lead the VAPT team and manage end-to-end application security assessments from testing through remediation and closure. Drive remediation lifecycle activities and coordinate with development, DevOps, vendors, and internal teams on secure SDLC requirements.

Cybersecurity Engineer

R.U.D.R.A Cybersecurity Pvt. Ltd.

Sep 2024 - Jun 2025 (9 months)

Performed end-to-end penetration testing of web applications, APIs, Android applications, and networks. Developed custom scripts and Nuclei templates to automate security testing and reporting workflows, and mentored junior engineers.

Penetration Testing Web Security API Security Android Security Network Security SAST DAST Nuclei Semgrep Threat Modeling Incident Response Forensic Analysis Mentorship Python BASH Kali Linux

Cybersecurity Analyst

Cipherbeam Technologies LLP

Jun 2023 - Aug 2024 (1 year 2 months)

Conducted web application VAPT based on OWASP Top 10 and validated vulnerabilities using Burp Suite, Nmap, Nessus, and SQLmap. Prepared vulnerability reports with PoC evidence and remediation recommendations, and retested vulnerabilities to confirm successful remediation.