WASIM KHAN
Information Security Analyst
+91 8388852749 | wk5919085@gmail.com | West Bengal, India | linkedin.com/in/wasim-khan-683669232
Professional Summary
Results-driven Information Security Analyst with proven expertise in end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across web, mobile, and enterprise network environments. Specialized in uncovering and remediating critical OWASP Top 10 vulnerabilities alongside advanced Active Directory (AD) exploitation techniques. Highly proficient with industry-leading security toolchains, delivering precise threat assessments for corporate and freelance engagements. Committed to proactive threat hunting, infrastructure hardening, and translating complex security findings into actionable remediation strategies.
Core Competencies & Technical Skills
- Web Application Penetration Testing
- OWASP Top 10 (SQLi, XSS, IDOR, CSRF)
- Android Mobile Penetration Testing
- Reverse Engineering & Static Analysis
- Burp Suite Pro, Metasploit Framework
- Nmap, Nikto, FFUF, Gobuster
- MobSF, Jadx, Frida
- Active Directory (AD) Penetration Testing
- Network Scanning & Enumeration
- Endpoint Security & Hardening
- Threat Hunting & Intelligence Analysis
Professional Experience
Cyber Investigator & Information Security Analyst | Integrated Cyber Nexus (ICN)
August 2026 – Present- Cyber investigation — casework and analytical support as part of the ICN team in Kolkata.
- Information security analysis — threat assessment and infrastructure advisory work.
- VAPT & network security — vulnerability assessment, penetration testing and enterprise network reviews.
- Application & web development — building security tools and web/application solutions for active engagements.
Cyber Security Consultant (Freelance) | Independent Practice
September 2023 – August 2026- Delivered full-lifecycle VAPT engagements and strategic cybersecurity consultancy, designing tailored remediation roadmaps for clients in tech, telecom, and AI.
- Audio Magic (Web App & API Security): conducted black-box web app and API penetration testing, uncovering high-severity flaws (IDOR, XSS, privilege escalation) and providing structured remediation reports.
- Airtel Bharti (Network & Endpoint Security): executed comprehensive network infrastructure audits and AD configuration assessments, identifying vulnerabilities and implementing robust CIS-aligned security policies.
- Cerebra AI (Web App & Cloud Security): performed in-depth grey-box penetration testing on an AI-powered SaaS platform, uncovering critical vulnerabilities (SQLi, BOLA) and integrating security controls into the SDLC.
Cyber Security Researcher | IEMLABS (Kolkata, India)
Feb 2023 – Sept 2023- Conducted comprehensive web application security audits to identify and remediate critical OWASP Top 10 vulnerabilities, delivering CVSS-scored findings.
- Executed multi-phase Active Directory (AD) penetration testing, mapping attack paths (Kerberoasting, Pass-the-Hash) and providing remediation strategies.
- Led proactive threat-hunting campaigns using behavioral analytics to detect and neutralize intrusion attempts and lateral movement.
- Utilized advanced security toolkits (Burp Suite Pro, Metasploit, Nmap, Frida) for deep-dive technical assessments and exploit PoC development.
- Performed Android mobile penetration testing, including APK decompilation, dynamic instrumentation, and static code analysis.
- Authored technical vulnerability reports and executive briefings with clear remediation timelines and risk prioritization.
Certifications
- Introduction to Dark Web, Anonymity & Cryptocurrency | EC-Council (2023)
- Cybersecurity for Businesses – The Fundamental Edition | EC-Council (2023)
- Diploma in Cyber Security | Indian School of Ethical Hacking (ISOEH) (2021–2022)
Education
Diploma in Cyber Security
2021 – 2022Indian School of Ethical Hacking, Kolkata
Bachelor of Science (B.Sc.)
2018 – 2020University of Gour Banga, West Bengal
Languages
English | Hindi | Bengali