Dawood Ayub

Cybersecurity analyst and Certified Ethical Hacker with hands-on experience across both offensive and defensive security, penetration testing and VAPT on one side, SIEM monitoring and IAM/PAM fundamentals on the other. Skilled at mapping findings to MITRE ATT&CK and translating technical risk into clear, actionable guidance for both red and blue teams.

InfoSec Intern – Red Team (VAPT) at Mobilink Microfinance Bank Limited (MMBL) (2026-03 – Present)

• Performed black-box VAPT on the career portal and delivered structured findings with risk ratings and remediation guidance
• Conducted ATM network penetration testing using Nmap and tcpdump, identifying exposed services and security weaknesses
• Used Rapid7 InsightVM and Nexpose for vulnerability scanning, triage, and risk prioritization across internal assets
• Participated in red vs. blue team tabletop exercises, mapping threat actor TTPs to MITRE ATT&CK to inform defensive strategies
• Contributed to ATM security assessment checklist development for standardized security reviews
• Gained exposure to Privileged Access Management (PAM) and insider threat control mechanisms

InfoSec Intern – OSINT & Reconnaissance at National Cyber Crime Investigation Agency (NCCIA) (2025-12 – 2026-03)

• Worked with the OSINT team on intelligence-gathering operations, automating IOC enrichment using Python scripts
• Applied passive and active reconnaissance techniques using Nmap and Wireshark to map digital footprints of targets

Software Development Intern at National Tariff Commission (2025-09 – 2025-10)

• Developed a role-based IT inventory and asset tracking system; collaborated with the Network Administrator on infrastructure troubleshooting and system security improvements

Python Automation & Security Scripting at Freelance (2023 – Present)

• Developed automation scripts for data extraction, validation, and workflow automation

Bachelor of Science in Computer Science – COMSATS University Islamabad, Wah Cantt Campus (2021 – 2025)