Ayaan Irfan

Cyber Security undergraduate with hands-on experience in offensive security, external visibility assessment, secure system design, and malware behavior analysis. Completed a cybersecurity internship focused on authorized public-facing asset review, practical security recommendations, incident handling guidance, monitoring awareness, and change tracking. Proven experience building security-focused systems including an async web vulnerability scanner, ransomware behavior detection engine, network intrusion detection system, and hardened full-stack e-commerce platform.

Cybersecurity Intern at Weaves Corporation Limited (formerly Khaadi) (2026-06 – 2026-07)

• Conducted an authorized, non-intrusive external visibility assessment of public-facing domains, subdomains, and endpoints, reviewing DNS records, SSL/TLS configurations, HTTP security headers, exposed technologies, and visible misconfigurations; documented findings and prioritized remediation recommendations.
• Evaluated day-to-day security practices across access control, password management, updates, monitoring, incident reporting, evidence preservation, approvals, and escalation; developed practical incident-handling guidance, monitoring recommendations, a quick-improvement roadmap, and a lightweight change-tracking approach with defined responsibilities and review activities.
• Drafted organization's Cybersecurity Policy, Incident Response Plan, and Cybersecurity Guidelines, incorporating COBIT 2019 governance principles and PCI DSS v4.0.1 SAQ A payment-security requirements for a cloud- and SaaS-based environment.

BS in Cyber Security – FAST NUCES, Karachi (2027)