Asim Shakeel

Offensive Security Specialist | Penetration Testing & AppSec | FAST-NUCES '26

Based in: Islamabad, PakistanMost recently: Penetration Testing Intern, Tech Hierarchy

Offensive security specialist with a background in government-level vulnerability assessments and financial sector SOC operations. Experienced in full-lifecycle VAPT, NIST CSF-aligned hardening, and securing production Node.js environments. Proven ability to identify and remediate high-criticality vulnerabilities across complex network infrastructures.

Experience

Penetration Testing Intern

Tech HierarchyRemoteinternshipMar 2026 – Apr 2026

Executed full-lifecycle VAPT across 3+ isolated VM sandbox targets - OSINT, host discovery (Nmap, Netdiscover), service enumeration, and exploitation of OWASP A03 (SQLi) and A07 (XSS) - producing structured PoC reports with CVSS v3.1-scored findings, payloads, screenshots, and executive-ready remediation recommendations. Designed enterprise-grade segmented VLAN topology in Cisco Packet Tracer; deployed DVWA and OWASP Juice Shop as live attack surfaces in isolated sandbox environments for repeated pentest cycles.

OSINTNmapNetdiscoverOWASP A03 (SQLi)OWASP A07 (XSS)CVSS v3.1Cisco Packet TracerDVWAOWASP Juice ShopVLAN

Application Security Intern

Developers HubRemoteinternshipMar 2026 – Apr 2026

Summary

Identified and validated 6+ critical/high vulnerabilities (OWASP A02, A03, A07) in a production Node.js application using Burp Suite, OWASP ZAP, SQLMap, and Nikto; performed false-positive triage and confirmed exploitability before escalating with CVSS v3.1 scores. Owned complete remediation cycle - bcrypt, JWT hardening, CSP, HTTPS, CSRF tokens, Helmet.js, rate limiting, CORS - then conducted remediation verification via Lynis audit confirming zero open OWASP Top 10 findings across the stack.

Results

Confirmed zero open OWASP Top 10 findings across the stack after remediation cycle.

Node.jsBurp SuiteOWASP ZAPSQLMapNiktoCVSS v3.1bcryptJWTCSPHTTPSCSRF tokensHelmet.jsRate limitingCORSLynis

Cybersecurity Intern

Pakistan Telecommunication Authority - Cybersecurity DirectorateIslamabad (On-site)workJun 2025 – Aug 2025

Summary

Observational internship focused on government-scale cybersecurity operations, SOC/NOC workflows, and NIST CSF frameworks.

What I did

Observed national-level SOC and NOC operations, gaining insight into real-time network traffic monitoring and threat mitigation strategies.
Gained exposure to how large-scale networks are monitored and how malicious traffic is identified and blocked in a government environment.

Results

Gained exposure to national-level SOC/NOC workflows and NIST CSF application.

NIST CSFWiresharkWindows ServerLog Analysis

Skills

Technical

Burp Suite

Nmap

OWASP Top 10

Kali Linux

Metasploit

OWASP ZAP

Wireshark

Meterpreter

XSS

SQLi

SQLMap

JWT

API Security Testing

Nessus

Netdiscover

Nikto

MSFVenom

OSINT

Broken Auth

CSRF

Suricata IDS

IBM QRadar SIEM

Python

SQL

NIST CSF

MITRE ATT&CK

Node.js

C/C++

Bash

Lynis

PowerShell

Projects

Network IDS Lab & Post-Exploitation Simulation

Security Architect / Pentesteracademic

Architected 4-VM attack/defend sandbox (Kali Linux attacker, Windows Server, Ubuntu targets, pfSense firewall); authored 12+ custom Suricata IDS rules, validated detection against live Meterpreter sessions achieving 0 false negatives on tested payload set. Documented privilege escalation chains with MITRE ATT&CK-mapped defensive controls; produced structured post-exploitation playbook for remediation verification.

Kali LinuxSuricataMetasploitMeterpreterpfSenseWindows ServerUbuntuMITRE ATT&CK

Context-Aware Web & API Misconfiguration Analyzer

Developerpersonal

Automated misconfiguration scanner targeting OWASP Top 10; successfully validated against test environments to detect SQLi, XSS, and CORS misconfigurations. Currently extending detection to Broken Access Control and Cryptographic Failures.

PythonFlaskOWASP ZAP APIOWASP Top 10

View the code

Education

B.Sc. Computer Science

FAST-NUCES, IslamabadComputer ScienceGPA 2.26 / 42026

Coursework

Offensive SecurityNetwork SecurityOS Internals

Recognition

Awards

Telecom Cyber Security Awards 2025

PTA & Huawei2025

Attendee/Speaker recognition

Certifications

Junior Penetration Tester Path

Hack The BoxCredential In Progress2026

Google Cybersecurity Professional Certificate

Google2024

Social impact & activities

Speaker/Attendee - Next Gen Cyber Resilience Workshop

Next Gen Cyber Resilience Workshop & Telecom Cyber Security Awards 2025workshop2025

Jointly organized by PTA & Huawei

Internet Governance & ICANN sessions

Internet Governance & ICANN sessionsother

Participation in governance sessions

Hire AsimReach out about a role, a contract or a conversation.For recruiters

Asim's twin is AI, it can make mistakes.

More people on Kanvis

Browse more people Create your own Kanvis