Muhammad Abdullah

Cybersecurity Engineer with 4 years in security compliance, GRC, and vulnerability assessment. ISO 27001/42001 Lead Auditor delivering audit ready compliance, VAPT, and cloud/AI security operations across regulated IT/OT environments.

Cyber Security Engineer - Xloop Digital Services (Pvt) Ltd - Karachi, Pakistan

(2022-11)

• Led 8+ internal and external compliance audits aligned with ISO 27001, ISO 42001, SBP, and NEPRA IT/OT requirements.
• Achieved 100% audit readiness through structured policy review, gap assessment, and risk treatment planning.
• Coordinated third-party vendor risk assessments and security tool evaluations, including Nessus, Rapid7, and Qualys.
• Supported control validation through VAPT engagements on 10+ web applications and infrastructure assets, aligned with OWASP Top 10 and NIST 800-115.
• Designed and delivered interactive cybersecurity awareness workshops for non-technical staff, enhancing organizational understanding of phishing threats and secure data handling protocols within regulated environments.

Blockchain Developer - XovoTech - Karachi, Pakistan

(2021-08 - 2022-10)

• Engineered and validated 5+ blockchain based applications and 10+ smart contracts using Ethereum, Solidity, and React prior to production deployment.
• Collaborated with a cross-functional team to design and build a decentralized application and accompanying smart contract using Ethereum, Solidity, and React.
• Managed source code version control and repository synchronization utilizing Git commands.
• Successfully deployed 10+ solutions on the Ethereum test network and conducted rigorous testing to validate functionality and security.

BS - Computer Science - Benazir Bhutto Shaheed University of Liyari