Javeria Aslam
Cybersecurity Intern | MS information security
Hire this person
Send a job offer directly to this candidate
About
MS Information Security candidate (NUST) with 1+ year of hands-on security experience and a software engineering background. Because I have carried out attacks end to end (reconnaissance, exploitation, privilege escalation, lateral movement), I know what attacker activity looks like in the logs and network traffic a SOC analyst reviews. Strong at investigation, documentation and clear written reporting.
Seeking a SOC Analyst L1 role to apply this attacker-side knowledge to alert triage and incident escalation.
Experience
Offensive Security Intern at Cyberster (2026-06 – 2026-09)
- Ran reconnaissance, OSINT and Nmap scans to map live hosts, open ports and vulnerable services, the same discovery activity SOC teams detect as scanning or reconnaissance.
- Performed Linux and Windows privilege escalation and Active Directory enumeration (PowerView, BloodHound), building working knowledge of post-compromise behavior and its MITRE ATT&CK mapping.
- Carried out post-exploitation and network pivoting (Proxychains, Chisel) in controlled labs, gaining insight into lateral-movement patterns defenders must spot.
- Validated vulnerabilities with Searchsploit and Metasploit and tested web applications with Burp Suite to document findings and impact.
Penetration Tester Trainee at PKNCERT (2025-07 – 2025-08)
- Supported cyber defense simulations: reconnaissance, enumeration and attack-surface mapping with Nmap, Netdiscover and OSINT.
- Executed client-side attacks on Windows 10/11 and validated security controls against them.
- Delivered risk-rated reports with remediation roadmaps to internal stakeholders, communicating technical findings clearly to non-technical readers.
- Built a Python automation framework that sped up vulnerability discovery workflows.
Associate SQA Engineer at Nakisa (2022-05 – 2023-06)
- Worked with international, cross-functional stakeholders, documenting defects with root-cause analysis and impact scoring, the same discipline used in incident write-ups.
- Built a systematic, detail-oriented investigation approach, testing edge cases and embedding security awareness into the SDLC.
Education
MS in Information Security – National University of Sciences and Technology (NUST), Islamabad (2024-09)
BS in Software Engineering – National Textile University (NTU), Faisalabad (2017-08 – 2021-09)
