Tehreem Iqbal

Mobile Application Security Testing, API Security Testing, Secure Code Review, Reverse Engineering, AI-assisted Security Analysis, MCP-based Security Tooling Integration, Security Compliance Testing (OWASP MSTG / MAS TRM)

Security Engineer at Ebryx (Pvt.) Ltd. (2023-05 – 2026-04)

• Conducted mobile application security assessments for Android applications aligned with OWASP MSTG, performing static, dynamic, and runtime analysis
• Performed security testing of mobile applications and backend APIs, identifying vulnerabilities in authentication, authorization, session handling, and data exposure
• Executed secure code reviews of Android applications (Java/Kotlin), focusing on sensitive data handling and access control mechanisms
• Identified and reported vulnerabilities including authorization bypass, insecure exported components, and insecure local storage
• Performed runtime analysis and basic security bypass testing using Frida, including SSL pinning bypass and application behavior inspection
• Conducted reverse engineering of Android applications using JADX and Ghidra to analyze application logic and security controls
• Applied threat modeling concepts to understand attack surfaces and identify potential abuse cases in application workflows
• Produced security assessment reports with detailed findings and remediation recommendations

Bachelor of Computer Science in Computer Science – PUCIT, University of the Punjab (2019-10 – 2023-05)