Open to opportunities

Wasim Khan

@wasimkhan2

Message

Security consultant with 6+ years specializing in pentesting, cloud, web, mobile, and infrastructure security.

United Kingdom

Message

What I'm looking for

I seek hands-on roles in application, cloud, or infrastructure security where I can lead pentests, improve defenses, mentor teams, and drive measurable risk reduction.

I am a Security Consultant with over six years of specialised experience delivering penetration testing, vulnerability assessments, and risk management across web, mobile (iOS/Android), cloud (AWS/Azure) and infrastructure environments. I have a track record of identifying critical vulnerabilities, performing root-cause analysis after incidents, and producing clear technical reports with actionable mitigations.

I have contributed to bug bounty findings, developed an iOS application penetration testing course acknowledged by major tech companies, and hold certifications including OSCP, CREST CPSA, CEH v11 and CREST CRT. I focus on practical, defensive security improvements—optimizing network segmentation, hardening cloud configurations, and applying reverse-engineering techniques to secure thick-client applications.

Experience

Work history, roles, and key accomplishments

Current

Security Consultant

Current

Secarma

Jun 2022 - Present (3 years 4 months)

Conducted comprehensive security assessments across web, mobile (iOS/Android), cloud (AWS/Azure) and infrastructure, identifying vulnerabilities and recommending mitigations to reduce attack surface and improve segmentation.

Penetration Testing Web Security Mobile Security AWS Azure Reverse Engineering

Security Consultant

Pentest People

Oct 2021 - Mar 2022 (5 months)

Performed penetration tests and vulnerability assessments for web, mobile (iOS/Android), API and infrastructure, and produced detailed technical reports with remediation recommendations.

Penetration Testing Vulnerability Assessment API Testing Mobile Security Report Writing Test Infrastructure iOS Android

Information Security Consultant

Xiarch

Jun 2019 - Oct 2021 (2 years 4 months)

Performed penetration testing and vulnerability assessments for web and mobile applications, conducted root cause analyses after incidents, and recommended improvements to security systems and procedures.

Penetration Testing VAPT Root Cause Analysis Web Security Mobile Security

Education

Degrees, certifications, and relevant coursework

Jaipur National University

Bachelor of Computer Applications, Computer Applications

2017 - 2021

Completed a Bachelor of Computer Applications program covering core topics in software development and computer systems from September 2017 to April 2021.