Umer Nasir

A highly enthusiastic cyber security professional driven by a deep passion for proactive defense, vulnerability identification, and threat mitigation. Possessing hands-on technical proficiency across complex infrastructure ecosystems, I thrive on breaking down intricate systems to reinforce architectural resilience. Committed to delivering meticulous methodology within elite security assessments, I have successfully executed several end-to-end security projects, including comprehensive hardware and application audits for high-stakes fintech platforms.

Security Engineer at Ebryx (2025-09 – Present)

• Executed comprehensive Web Application Penetesting to systematically uncover, document, and remediate high-impact vectors including SQL Injection, Cross-Site Scripting (XSS), CSRF, IDOR, SSRF, and broken authentication workflows.
• Conducted rigorous Mobile Application Pentesting across target platforms to review local storage security, binary signatures, obfuscation controls, and runtime vulnerabilities.
• Performed structural API Security Assessments to identify misconfigured endpoints, broken object-level authorization (BOLA), information disclosure, and loose parameter validation schemas.
• Simulated internal and external vector attacks within enterprise-scale Active Directory Environments to locate lateral movement paths, privilege escalation risks, and kerberoasting vulnerabilities.
• Delivered rigorous Network Security Assessments (Internal & External) to maps exposures, misconfigured protocols, perimeter weaknesses, and obsolete service versions.
• Led comprehensive Cloud Security Assessments across Microsoft Azure and MS365 ecosystems, focusing on multi-tenant isolation, IAM roles, conditional access architecture, and asset exposures.

Bachelors of Science in Computer Science in Computer Science – Lahore Garrison University, Lahore (2019 – 2024)