Umair Saeed

Led penetration testing for enterprise-level web and mobile applications, conducting black-box and gray-box assessments. Created proof-of-concepts for vulnerabilities and assisted developers in remediation, utilizing OWASP Testing Methodology and CVSS for risk reporting. Automated reconnaissance and scanning processes using Python scripts.

Carried out vulnerability assessments using Nessus, Burp Suite, and manual testing, detecting and exploiting vulnerabilities. Performed post-exploitation and privilege escalation in Linux/Windows testbeds. Assisted junior interns and documented methodologies for internal use.

Collaborated with a cybersecurity consulting team to address Identity and Access Management (IAM) challenges, developing solutions aligned with business objectives and cybersecurity best practices. Delivered comprehensive documentation and presentations, effectively communicating complex technical concepts.

Designed phishing email simulations for the Security Awareness team and interpreted simulation results to analyze vulnerabilities. This enhanced cybersecurity awareness and strengthened understanding of phishing attacks and mitigation strategies.

Investigated suspicious emails and utilized open-source tools to identify potential cybersecurity threats. Conducted network packet analysis using Wireshark to detect anomalies and potential security threats, gaining experience in risk assessment, incident response, and cybersecurity compliance tasks.

Gained hands-on experience in network and web application hacking labs, including reconnaissance, scanning, and exploitation using tools like Nmap, Nikto, and Hydra. Developed skills in reporting and impact analysis of security flaws.

Shadowed senior PenTesters and participated in testing internal tools. Helped in setting up labs and performing routine scans.

Completed secondary education at Nishat Boys High School in Multan, focusing on foundational subjects.

Completed higher secondary education at Aspire College in Multan, building upon foundational knowledge.