Looking for a job

talal rehan

@talalrehan

Security analyst at GEN_II delivering cybersecurity consulting and AI solutions; built a custom SIEM panel and attack-detection tool.

Pakistan

Message

What I'm looking for

I'm seeking a remote role in vulnerability management, incident response, or application security.

At GEN_II, I lead AI strategy and solution design for client-facing products, including chatbot integration and customer-support automation. I also provide cybersecurity consulting and web/API security assessments, translating findings into prioritized remediation plans.

At HackerOne, I monitored and triaged security alerts and investigated unauthorized API login attempts and access-control violations. I identified 15+ IDOR and Broken Access Control findings and designed a custom SIEM monitoring panel and Attack Detection Log Tool that contributed to a reduction in false positives.

I built a custom SIEM panel and attack-detection log tool with a real-time log-ingestion engine, an alert dashboard, and rule-based detection across multiple log sources. In simulations, its automated summaries and severity classification cut analyst triage time by about 40%.

My work also includes security architecture advice for NexusLang and NexusShop, practical cybersecurity training at IT-SIMPLERA, and web/API vulnerability research. I hold CEH, eJPT, CompTIA Security+, GCIH, and EC-Council CSA certifications, and I’m seeking a remote role in vulnerability management, incident response, or application security.

Experience

Work history, roles, and key accomplishments

Current

Assistant Director - Cybersecurity & Director of AI

Current

GEN_II

Aug 2026 - Present (3 months)

Leads AI strategy and cybersecurity consulting, including VAPT and web/API security assessments. Manages technical project planning and client communication.

AI Strategy Cybersecurity Consulting VAPT Web Security API Security Project Planning Client Communication

Current

Founding Security Advisor & Co-Founder

Current

NexusLang / NexusShop

Jan 2026 - Present (10 months)

Co-founded both ventures as an equal partner, advising on security architecture, threat modeling, and penetration testing. Provides incident-response planning and Pakistan-market compliance guidance.

Security Architecture Threat Modeling Penetration Testing Incident Response Compliance

Current

Freelance Security Researcher

Current

Independent / Bug Bounty

Conducts web/API penetration testing, VAPT, and OSINT-based security research for independent clients. Active on HackerOne with 9 reports submitted.

Web Application Penetration Testing (WAPT)API Security VAPT OSINT HackerOne

Cybersecurity Instructor / Trainer

IT-SIMPLERA

Jun 2026 - Aug 2026 (2 months)

Conducted practical cybersecurity training covering ethical hacking, penetration testing, and web application security. Delivered 1-to-1 and group mentoring sessions.

Ethical Hacking Penetration Testing Web Application Security OWASP Top 10 Mentorship

Security Analyst - SOC Operations

HackerOne

Nov 2025 - Mar 2026 (4 months)

Monitored and triaged 50+ daily security alerts, reducing unauthorized-access incidents by ~35% and false positives by ~20%. Built a custom SIEM panel and attack-detection log tool.

SIEM Log Analysis Wireshark OWASP Top 10 IDOR Broken Access Control Testing RBAC Purple Team Incident Response Threat Detection

SOC Analyst - Security Operations

Confidential Client

Oct 2025 - Dec 2025 (2 months)

Monitored and triaged security events via SIEM dashboards, investigated phishing and malware alerts, and contributed to detection-rule tuning reducing false positives by ~20%.

Splunk Microsoft Sentinel SIEM Log Correlation Incident Response Phishing Analysis Malware Analysis Detection Rule Development

Security Intern - Vulnerability Analysis

Remote Vulnerability Research Program

Oct 2023 - Oct 2024 (1 year)

Performed manual security testing of web applications and REST APIs against OWASP Top 10, identifying IDOR, broken authentication, and business-logic flaws. Delivered structured vulnerability reports with PoC and CVSS scores.

Burp suite OWASP Top 10 IDOR Broken Authentication Business Logic Flaws Vulnerability Assessment POC CVSS