MUHAMMAD UMAIR SHAHID
Portland,USA
Summary
Dynamic Cybersecurity Engineer with over 5 years of experience specializing in ethical hacking, penetration testing, vulnerability assessment, and security operations. Expertise in identifying and exploiting security weaknesses across networks, web applications, and cloud environments to strengthen organizational defenses. Proficient in utilizing SIEM platforms such as Splunk and IBM QRadar, endpoint security solutions like CrowdStrike and Microsoft Defender, and firewall technologies including Palo Alto, Fortinet, and Cisco ASA. Demonstrated ability in incident response, IDS/IPS monitoring, malware analysis, and securing AWS and Azure infrastructures, complemented by strong automation skills in Python, Bash, and PowerShell while adhering to compliance frameworks such as NIST, ISO 27001, SOC 2, HIPAA, and GDPR.
Overview
5
5
years of professional experience
1
1
Certification
Work History
Cybersecurity Engineer
Solutions Cybersecurity Company Pvt. Limited
01.2023 - Current
- Perform penetration testing and vulnerability assessments on web applications, cloud environments, and enterprise networks.
- Monitor and analyze security alerts using SIEM tools to detect threats and support incident response.
- Investigate malware, phishing campaigns, and advanced persistent threats (APT)
- Implement endpoint detection and response (EDR) using CrowdStrike and Microsoft Defender.
- Secure AWS & Azure infrastructure using IAM policies, logging, and security monitoring.
- Automate security processes using Python, Bash, and PowerShell scripts.
- Conduct security risk assessments and support compliance audits (ISO 27001, SOC 2, NIST)
- Improve threat detection capabilities through proactive threat hunting and log analysis.
- Remote
Cybersecurity & Network Security Engineer
webo.pk
01.2021 - 01.2023
- Conducted penetration testing and vulnerability assessments on web applications, servers, and internal networks.
- Monitored network traffic and security logs to detect cyber threats and unauthorized activities.
- Configured and managed firewalls (Palo Alto, Fortinet, Cisco ASA) for threat prevention and network segmentation.
- Implemented server hardening and security configurations for Linux and Windows environments.
- Deployed IDS/IPS and Web Application Firewall (WAF) solutions to mitigate cyber attacks.
- Investigated malware incidents, phishing attacks, brute-force attempts, and system compromises.
- Performed patch management and vulnerability remediation to reduce critical risk exposure.
- Supported secure hosting environments and cloud deployments aligned with cybersecurity best practices.
- Implemented VPN security, access controls, and secure network architecture.
Education
Bachelor of Science - Computer Science
University of The Punjab
01.2021
Skills
- Security Operations & Threat Hunting
- Incident Response & Malware Analysis
- SIEM Monitoring (Splunk, IBM QRadar)
- Ethical Hacking & Penetration Testing
- Vulnerability Assessment & OWASP Testing
- Network Security & Firewall Management
- IDS/IPS Monitoring & Threat Detection
- Cloud Security (AWS, Microsoft Azure)
- Endpoint Security (CrowdStrike, Microsoft Defender)
- Linux & Windows Security Hardening
- Penetration Testing Tools (Nmap, Burp Suite, Metasploit, Nessus)
- Network Analysis (Wireshark, TCP/IP Security)
- Security Automation (Python, Bash, PowerShell)
- Compliance Frameworks (NIST, ISO 27001, SOC 2, HIPAA, GDPR)
Certification
- AWS Certified Security – Specialty
- AWS Certified Solutions Architect – Associate
- Certified Information Security Manager (CISM)
- CompTIA Security+ (SY0-701)
- CompTIA Cybersecurity Analyst (CySA+)
- Certified Blue Team Level 1 (BTL1)
- Certified Network Security Practitioner (CNSP)
- CNSS Certified Network Security Specialist (ICSI)
Timeline
Cybersecurity Engineer
Solutions Cybersecurity Company Pvt. Limited
01.2023 - Current
Cybersecurity & Network Security Engineer
webo.pk
01.2021 - 01.2023
Bachelor of Science - Computer Science
University of The Punjab