Muhammad Taha

Muhammad Taha Major: Information Security Contact no: - Email ID:-Address: E-11/2, SCHS, Islamabad. CAREER OBJECTIVE: To secure a position as an Information Security Analyst in an organization that will utilize my skills and knowledge for their growth and where I can enhance my skills and learn to contribute more towards organization and society. EDUCATION:- 2012 – 2016 MS (Information Security)-Riphah International University Islamabad. B S ( C O M P U T E R S C I E N C E ) - DHA Suffa University Karachi. - I N T E R M E D I A T E – Garrison Degree College Quetta Cant. - M A T R I C U L A T I O N - Bahria Foundation College Quetta. SKILLS: -Operating Systems -Programming Languages -Tools -Other Skills - Kali Linux, Caine, Remnux, Windows, Android. - Java, Asp.Net, C++, HTML, CSS, JS, MySQL, Python. - Rm studio, Metasploit, Burp Suite, Nessus, Exploit-DB, Accunetix, Nexpose, Cain and Abel, Ettercap, Cobalt strike, Nikto, OpenVAS. - Latex, MS Office suite, GitHub. MS PROJECTS: - Penetration Testing of a Network (Exploitation and Report) ISMS for Hospital (Security Plan, Policies, Risk Management) Analysis of Malware Sample (Static Analysis, Dynamic Analysis) Email Forensics (Identify group of people involved in fraud in a large Dataset) Report on Global Cyber Policies of Social Media and its implementation in Pakistan. Side Channel Attacks prevention using Cryptographic techniques. BS Projects : - Munshi (ASP.net, MYSQL) Apply Karachi (Java, MVC) Restaurant Management System (Java, MYSQL) Hospital Management System (OOP, C++) Virtual Operating System (OS, Java) Semantic based Online Transport System (Ontology, Protégé) ACHIEVEMENTS & ACTIVITIES: - CEH v9 (Scored 91% in Certified Ethical Hacker Examination) - Preparing for OSCP (expecting to attempt exam within six months) and OSCE (within 18 months) - Merit Scholarship for all semesters in MS Information Security (3.89 CGPA). - Participated in OIC CERT Cyber Drill hosted by Malaysia September 2017. - Ethical Hacking Workshop May 2017, MCS campus, NUST. - Member of PISA (Pakistan Information Security Association). Activities includes engaging with Professionals of Information Security Industry to discuss the Cyber space of Pakistan. - Member of ISOC (Internet Society) Islamabad Chapter. Activities includes engaging with professionals in their meetings regarding Internet and their challenges. - Organized event and participated in IOT alliance at Jinnah Convention Center Islamabad headed by Mr. Ammar Jaffri. - Participated in Procom 2016 (Mobile Application Development Competition), FAST NU, Karachi. - Participated in Speed Pro 2015(Speed Programming) DHA SUFFA University, Karachi. - Participated in Faculty Member’s Project on Social Media Trend Analysis (Python). - Programming Language Certificate 2010 (C language). Professional Experience: 1- Penetration Tester at Private Organization (May 2018 - Present): Working as a Penetration Tester/Network Security in a Cyber Security Department of a private organization. My responsibilities are to perform penetration testing of websites and to work closely with Cyber Security Department to enhance the security. 2- Trainee at Security Experts (April 2017- Current) with Ammar Jaffri (Former DG FIA), President PISA, President ISACA Islamabad Chapter: As an Information Security Trainee, my responsibilities were to engage with various Security related Assignments. Activities at Security Experts includes: i. Learning Penetration Testing with Kali Linux. ii. Mobile Forensics using XRY tool. iii. ISO 27001 for implementing ISMS and other related standards and certifications. iv. Engaging with other teams for their IOT products and IOT Security. v. Engage with professionals of Information Security. 3- Teacher and IT Operator in SPN Professional Skills Development Institute Quetta (September 2016- November 2016): As a teacher to teach IT related courses. Courses includes Computer Networking, Computer Security, Java, Database. 4- Worked on different security projects at freelancing websites: Projects includes: I. OpenSSL to implement Cryptographic protocols and work on security hardening. II. Penetration testing for Password Cracking of Routers. III. Penetration testing of websites based on OWASP Top 10 and OWASP ASVS standards. IV. Teaching Kali Linux for Penetration Testing online to various students. V. Report on Continuous improvement implementation in big organizations. VI. Cyber Policies of different countries and its role in Pakistan. VII. Implemented ISO 27001 Standards for an organization based in USA. VIII. Performed Penetration Testing of various websites for clients on freelancing platforms. IX. As part of Digital Forensics team to handle a Forensics Case. X. Malware Analysis of a PE32 malware sample. XI. Cyber Risk Assessment of an organization according to NIST SP 800-53 Standard. XII. Incident Response Plan, ISO 27001 Policies and Security review of organizations. Links: LinkedIn: https://www.linkedin.com/in/muhammad-taha-cehv9-b5278a7b/