Muhammad Zeshan

Offensive security practitioner with practical experience in penetration testing, API security assessments, and red team–oriented methodologies. Over the past few years, I have worked on identifying vulnerabilities, analyzing attack surfaces, and developing structured approaches to simulate real-world adversarial behavior. My background also includes serving as a Data Security Analyst, where I was responsible for protecting organizational data assets and coordinating technical security efforts across teams.

I have a strong interest in offensive tooling and automation, particularly using Python to build and customize utilities that improve reconnaissance and exploitation workflows. My experience extends to designing phishing simulation environments, deploying controlled attack labs, and testing cloud-hosted infrastructures. Alongside technical practice, I actively mentor cybersecurity students locally and internationally, focusing on practical penetration testing and API exploitation.

I continue to participate in bug bounty programs through HackerOne, refining my vulnerability research skills and maintaining hands-on exposure to real-world targets.

Data Security Analyst & Team Lead at Giga House Agency (2024-05 – 2025-05)

Key Responsibilities

• Managed and secured organizational data assets and internal infrastructure
• Implemented access control policies and system hardening practices
• Conducted internal security assessments and vulnerability identification
• Monitored system logs and suspicious activities
• Led a small technical team for security implementation and issue resolution
• Coordinated secure deployment practices for web-based systems

Data Security Analyst & Team Lead at Giga House Agency (2024-05 – 2025-05)

Technical Scope

• Linux & Windows server environments
• Web security management
• Risk mitigation & incident response handling

Cybersecurity Instructor & Program Lead at CyberZest (2024-03 – Present)

• Delivered structured penetration testing training to 35+ students
• Mentored 2 advanced Red Team students (France & Saudi Arabia)
• Designed and launched Web API Bug Bounty course (Hands-On Focused)
• Developed practical lab-based offensive security curriculum

Bug Bounty & Security Research at HackerOne (2026-01 – Present)

• Active participant on HackerOne
• Experience in vulnerability discovery and responsible disclosure
• Focus areas: API logic flaws, authentication bypass, misconfigurations

BS Cyber Security in Cyber Security – Islamia University of Bahawalpur (2024 – 2028)

ICS in Computer Science – BWP Board (2022 – 2024)