Ashfaqul Haq

A results-driven Red Team specialist with experience identifying vulnerabilities across software, hardware, and network infrastructure. Comprehensive penetration testing of digital platforms (Web, Android) and physical / embedded systems — including IoT devices, access-control hardware, biometric data, and telco assets. Skilled in realistic APT simulations and bypassing modern defenses through sophisticated EDR and Antivirus evasion.

Shorborno — Off. Sec. Engineer

• 200+ web and Android pentests on enterprise clients and bug-bounty programs.
• Critical web vulnerabilities — SQLi, SSRF, SSTI, XSS, broken auth and authorization.
• Embedded-systems assessments — IoT devices, access-control hardware, biometric data.
• Multi-stage Red Team engagements with APT simulations.
• Custom payloads — EDR evasion and DLP bypass.
• Technical reports with reproducible PoCs and strategic remediation.

Pentester Space — Cyber Security Analyst

• SOC monitoring with SolarWinds, Suricata, Wazuh, Splunk.
• SOAR-driven incident response across web, Android, network, and Active Directory.
• Compliance support — GDPR, ISO/IEC 27001, MITRE ATT&CK, NIST.
• IAM controls and AWS security best practices for new projects and vendors.

Synack Red Team — Security Researcher

• Vulnerability research on web and Android applications.
• Critical-to-low findings reported across the program lifecycle.