Open to opportunities

YOUSUF NIHAL

@yousufnihal

Message

Cybersecurity expert specializing in penetration testing and secure SDLC.

India

Message

What I'm looking for

I seek roles where I can lead secure SDLC initiatives, perform advanced application and cloud security assessments, mentor teams, and engage with clients to build pragmatic security solutions in collaborative, growth-oriented environments.

I am a cybersecurity professional with extensive hands-on experience in penetration testing, security architecture, and secure SDLC implementation across BFSI, Government, Healthcare, Energy, Retail, eCommerce, and EdTech sectors. I lead assessments for web, mobile, and API platforms, perform SAST, DAST, IAST, SCA, threat modeling, code reviews, container and database security, and deliver clear remediation guidance and reports that drive measurable security improvements.

I have a track record of leadership in client engagement, pre-sales, mentoring, and team management, including spearheading security for a core banking application and managing VAPT projects end-to-end. My achievements include CVE authorship, a recognized vulnerability disclosure to NASA, a top Hack The Box CTF rank, published technical writing, and multiple awards and honors that reflect my commitment to research and continuous learning.

Experience

Work history, roles, and key accomplishments

Current

Product Security Consultant

Current

Emirates NBD

Jul 2025 - Present (8 months)

Spearheading security for a core banking application, leading a team of security engineers and integrating SAST/DAST/IAST/SCA into the SDLC to identify and remediate vulnerabilities across web, API, and mobile, and align controls to OWASP, PCI DSS, ISO 27001 and NIST.

Application Security API Security Mobile Security SAST DAST IAST SCA Penetration Testing

Penetration Tester

Wattlecorp Cybersecurity Labs

Nov 2023 - Jul 2025 (1 year 8 months)

Performed penetration assessments for web, API, mobile and network targets across Energy, Retail, Healthcare, BFSI, eCommerce, Government and EdTech sectors; produced detailed VAPT reports with PoCs and remediation guidance and managed project documentation and QA.

Penetration Testing API Testing Mobile Security & QA Client Engagement SOPs

Security Analyst

The BuyTech

Nov 2020 - Nov 2023 (3 years)

Early team member driving security architecture and core product security; conducted independent assessments of web, API and mobile platforms, led pre-sales technical calls, managed project delivery and authored technical and executive vulnerability reports.

Security Architecture Vulnerability Assessment Web Security API Security Mobile Security Pre Sales Project Delivery Technical Reporting

Education

Degrees, certifications, and relevant coursework

Visvesvaraya Technological University

Bachelor of Technology, Computer Science and Engineering

2019 - 2023

Activities and societies: Studied at Srinivas Institute of Technology; built multiple websites, web applications, Android applications, and a machine learning project.

B.Tech in Computer Science and Engineering completed with coursework and projects in web and Android development and a machine learning project.