Looking for a job

Zana Sulaiman

@zanasulaiman

I secure web, mobile, and infrastructure environments through penetration testing, SIEM optimization, and compliance-driven defense.

Iraq

Message

I've strengthened security at Galina and NASS through web, mobile, infrastructure, and server penetration testing, vulnerability assessments, SIEM optimization, and EDR/XDR management. I also aligned security posture with Central Bank requirements and supported successful compliance audits.

I'm an active bug bounty hunter who has responsibly disclosed vulnerabilities across web and infrastructure environments, and I build practical security solutions with Python, Bash, PowerShell, C++, C#, and Raspberry Pi. My home-based firewall initiative helped inspire safer “Family Package” internet offerings.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Engineer

Current

Galina

Dec 2025 - Present (9 months)

Led cyber security duties including penetration testing on web and mobile applications, internal and external network security checks, and management of web application firewalls and EDR/XDR platforms. Also led security awareness in-person trainings.

Penetration Testing Web Application Security Mobile Application Security Network Security Cloudflare EDR XDR Nebula Security Awareness Training

Cyber Security Engineer

NASS

Nov 2022 - Dec 2025 (3 years 1 month)

Conducted comprehensive vulnerability assessments and penetration testing across web, mobile, infrastructure, and server environments. Managed SIEM operations with Wazuh, implemented compliance frameworks, and collaborated with the national Central Bank to align security posture with government requirements.

Bug Bounty Hunter & Developer

Zet-Sec

May 2015 - Apr 2024 (8 years 11 months)

Actively engaged in bug bounty programs on platforms like HackerOne and Intigriti, identifying and disclosing security vulnerabilities in high-profile organizations. Developed hardware and software solutions using Raspberry Pi and implemented a custom home-based firewall that led to collaboration with telecommunication companies.

Bug Bounty HackerOne Intigriti Web Security Infrastructure Security Raspberry Pi IoT Firewall Development Hardware Prototyping

Penetration Tester

Eaak Tech

Apr 2019 - Nov 2022 (3 years 7 months)

Executed advanced penetration testing on web, mobile, infrastructure, and server environments, delivering actionable remediation recommendations. Built and administered centralized WHM-based hosting environments and supported pre-sales and project management teams.