Hassan Ali Arshad

Cybersecurity professional specialising in Vulnerability Assessment and Penetration Testing (VAPT) with proven experience in securing web applications, APIs, network infrastructures, and mobile platforms. Strong background in identifying, exploiting, and validating security vulnerabilities using structured testing methodologies aligned with industry standards. Capable of translating complex technical findings into actionable remediation strategies for technical and non-technical stakeholders.

Committed to enhancing organisational resilience against modern cyber threats through continuous research, risk analysis, and security optimisation.

Senior Pentester at Saazan Tech (2019-01 – Present)

• Performed comprehensive penetration testing on web applications and APIs developed by the company to identify security vulnerabilities and logic flaws.
• Conducted vulnerability assessments on enterprise network environments to detect misconfigurations, exposed services, and security weaknesses.
• Performed in-depth analysis of application traffic to identify authentication issues, insecure data exposure, improper access controls, and input validation flaws.
• Identified and validated vulnerabilities such as XSS, SQL Injection, IDOR, authentication bypass, misconfigurations, and API security flaws.
• Prepared detailed technical reports outlining risk ratings, proof of concepts (PoCs), business impact, and remediation recommendations.
• Researched about new threats, attacks, and vulnerabilities that may affect IT infrastructure.
• Investigated potential cyber-attacks and intrusion attempts.
• Ensured cybersecurity plans, controls, processes, standards, policies and procedures are aligned with cybersecurity standards.
• Learned new skills, testing techniques and troubleshooting best practices.

Junior Pentester at Security Foster (2020-01 – 2021-12)

• Assisted in performing penetration testing on web applications, APIs, network infrastructures, and mobile applications.
• Identified security vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), IDOR, authentication bypass, and misconfigurations.
• Conducted vulnerability assessments using tools such as Burp Suite, Nmap, SQLmap, and Nikto.
• Participated in security testing engagements under senior supervision and contributed to remediation recommendations.
• Created and refined testing methodologies to improve vulnerability identification and validation processes.
• Documented findings in structured reports, including proof-of-concept (PoC), risk level, and mitigation strategies.
• Collaborated with development teams to verify fixes and ensure secure coding practices.

Bug Bounty Hunter at Bugcrowd, HackerOne (2022-01 – Present)

• Earning recognition for my exceptional performance.
• Detected and addressed critical security gaps in leading organizations, including MasterCard, Dell, GOV UK and Walmart.
• Acknowledged for reporting critical security vulnerabilities, such as Broken Access Control (BAC), Cross Site Scripting (XSS), Information Disclosures and Server-Side Request Forgery (SSRF).

MSc in Cyber Security – University of Hertfordshire (2022-01 – 2024-12)

BS in Software engineering – Iqra University (2016-01 – 2020-12)