Wasim Khan
Resume

← Profile hub Work Experience

Work Experience

Three stages, one discipline: investigate the evidence, test the defences, report what matters.

Cyber Investigator & Information Security Analyst

Integrated Cyber Nexus (ICN) · Kolkata, West Bengal

August 2026 – Present
  • Cyber investigation — casework and analytical support as part of the ICN team.
  • Information security analysis — assessment and advisory work.
  • VAPT & network security — vulnerability assessment, penetration testing and network reviews.
  • Application & web development — building tools and web/application work where engagements call for it.
  • Other cybersecurity work — as assigned across ICN engagements.

Freelance Cyber Investigator / Cybersecurity Consultant

Independent Practice

September 2023 – August 2026
  • Cyber investigation — incident-related investigative support and casework.
  • Cyber forensics — examination and analysis of digital evidence.
  • VAPT — vulnerability assessment and penetration testing across web, API and mobile layers.
  • Network security reviews — infrastructure audits and hardening.
  • Web & mobile application development — development work alongside security engagements.
  • Cybersecurity consultancy — advisory and related project work across several industries.
  • Multiple state and government agency engagements (agency names withheld for confidentiality).

Cyber Security Researcher

IEMLABS · Kolkata, India

Feb 2023 – Sept 2023
  • Conducted web application security audits and penetration tests, identifying critical OWASP Top 10 vulnerabilities and providing CVSS-scored findings.
  • Performed multi-phase Active Directory penetration testing, mapped attack paths such as Kerberoasting and Pass-the-Hash, and provided remediation strategies.
  • Ran proactive threat-hunting campaigns using behavioural analytics to detect intrusion attempts and lateral movement.
  • Used Burp Suite Pro, Metasploit, Nmap and Frida for in-depth technical assessments and exploit proof-of-concept development.
  • Tested Android applications through APK decompilation, dynamic instrumentation and static code analysis.
  • Authored technical vulnerability reports and executive briefings with remediation timelines and risk prioritisation.