Rooshan Riaz
Cybersecurity Engineer | Vulnerability Management | Product Security | AppSec
Hire this person
Send a job offer directly to this candidate
About
Cyber Security graduate from GIKI specializing in application security, vulnerability assessment, and SIEM-based monitoring. Hands-on experience with OWASP Top 10 testing, vulnerability scanning, threat detection, cloud security, and DevSecOps practices. Skilled in tools including Burp Suite, OWASP ZAP, Nessus, OpenVAS, Wazuh, ELK Stack, Snort, Suricata, Nmap, and Metasploit, with knowledge of NIST CSF, CIS Controls, and secure SDLC.
Experience
Web Application Penetration Tester Intern - Securetackles (SMC-PVT Ltd.) - Islamabad, Pakistan
(2025-07 - 2025-09)
- Performed application security assessments and vulnerability testing for enterprise web applications using OWASP Top 10 methodology.
- Used Burp Suite, OWASP ZAP, Nmap, and manual testing techniques to identify authentication, authorization, input validation, and session management weaknesses.
- Documented vulnerabilities with severity, technical evidence, business impact, and remediation recommendations for stakeholders and development teams.
- Strengthened understanding of secure SDLC, product security, risk-based remediation, vulnerability validation, and security reporting workflows.
Cyber Security Intern - Bytewise Limited - Islamabad, Pakistan
(2024-06 - 2024-08)
- Practiced network traffic analysis using Wireshark to identify packets, protocols, and suspicious communication patterns.
- Built foundational knowledge of standards, compliance, SOC workflows, threat intelligence platforms, and secure system administration.
Education
Bachelor of Science - Cyber Security - Ghulam Ishaq Khan Institute of Engineering Sciences & Technology (GIKI) (2022-09 - 2026-06)
