Resume

Rana Uzair Ahmad

Penetration Tester · SOC Analyst · Security Researcher

Islamabad, Pakistanranauzair370@gmail.com LinkedIn GitHub TryHackMe

Profile

Professional Summary

Seventh semester Cybersecurity student at Air University, Islamabad, with hands-on experience across offensive and defensive security. I conduct penetration testing and vulnerability assessments, build SOC tooling and SIEM detections, and develop security automation in Python and C. Comfortable across the full attack lifecycle: reconnaissance, exploitation, threat hunting, malware analysis, and digital forensics, backed by CompTIA PenTest+ and a stack of specialized certifications.

Capabilities

Technical Skills

Penetration Testing 85%

Python & Security Automation 88%

Network Security & Monitoring 82%

SIEM & Threat Detection 80%

Linux & System Hardening 90%

Malware Analysis & Reverse Engineering 72%

Digital Forensics 75%

C / Low-Level Programming 78%

Offensive Security

Penetration TestingWeb Application SecurityNetwork Penetration TestingVulnerability AssessmentOSINT & ReconnaissanceExploit Development

Defensive Security

SOC OperationsSIEM (Wazuh, Splunk, ELK)Threat HuntingIncident ResponseThreat IntelligenceLog Analysis & Detection Engineering

Forensics & Malware

Digital Forensics (Autopsy, CSI Linux)Reverse Engineering (x64dbg)Malware AnalysisMemory & Disk ForensicsNetwork Forensics (Wireshark)

Programming & Scripting

PythonC / C++Bash & ShellJavaScriptPowerShellAssemblyRustSQL

Tools & Platforms

Burp SuiteMetasploitNmap & NessusSQLmap & OWASP ZAPWazuh / Splunk / KibanaGhidra & x64dbgGit & Docker

Operating Systems & Frameworks

Kali LinuxParrot OSUbuntu / DebianWindows InternalsMITRE ATT&CKOWASP Top 10NIST CSF

Career

Professional Experience

Penetration Tester

Apr 2025 - Present

ZeroxInnovation · Remote

Perform vulnerability assessments and penetration tests on client web applications and networks, mapping findings to OWASP Top 10 and MITRE ATT&CK.
Identify, validate, and safely demonstrate exploitable weaknesses, then prioritize them by business risk for remediation.
Deliver clear technical reports with reproduction steps, severity ratings, and actionable remediation guidance for both engineering and management audiences.

Burp SuiteMetasploitNmapSQLmapKali LinuxPython

Cybersecurity Intern, SOC & Security Tooling

Jun 2024 - Sep 2024

National Cybercrime & Forensics Lab, NCCS (Air University) · Islamabad, Pakistan

Operated and tuned SIEM platforms (Wazuh, Splunk, Kibana) to monitor, triage, and investigate security events across lab infrastructure.
Designed and built a custom C based endpoint agent for network scanning, log collection, and active response, extending the lab’s detection coverage.
Applied C, JavaScript, Python, and MySQL to automate data collection and reporting tasks during live security operations.
Gained hands-on exposure to incident response, threat detection, and digital forensics workflows.

WazuhSplunkKibanaCPythonMySQL

Independent Security Researcher & Open Source Developer

2023 - Present

Self-directed · Islamabad, Pakistan

Designed and published 34+ open source security tools spanning packet analysis, SSH hardening, reconnaissance, SIEM agents, and system auditing.
Compete in CTFs on TryHackMe (Top 3% globally) and HackTheBox, sharpening exploitation, forensics, and reverse engineering skills.
Document techniques and writeups to share knowledge with the security community.

PythonCBashScapyLinux

Selected work

Key Projects

All projects

NetSnoop

A Python packet analyzer built with Scapy for real-time traffic capture and analysis. Supports multi-protocol dissection, BPF filtering, and PCAP export.

PythonScapyMatplotlib

CortexCLI

An AI-integrated command-line security tool written in C that uses AI assistance for security operations and threat analysis.

CAI Integration

VortexTunnel

A Python SSH tunneling tool for creating secure, encrypted communication channels with multiple tunneling modes and simple configuration.

PythonSSHNetworking

SSHield

A Python toolkit for hardening SSH configurations, monitoring access, and detecting brute-force attacks.

PythonSSHSecurity

SecureDork

An automated Google dorking tool for reconnaissance during penetration testing. Generates and runs targeted queries to surface exposed information.

JavaScriptWeb Scraping

System-Auditor

A C-based auditing tool that runs automated checks on system configuration, permissions, and known weaknesses for security assessments.

CLinuxSecurity

Academics

Education

BS in Cyber Security

2023 - 2027 (Expected)

Air University, Islamabad

Seventh semester. Coursework: Network Security, Cryptography, Malware Analysis, Digital Forensics, Operating Systems, Secure Software Design.
Active member of the university cybersecurity community and CTF team.

Credentials

Certifications & Achievements

All 17 certifications, verified against the original documents. Click any card to view the certificate.

Oct 2025

CompTIA PenTest+ (PT0-002)

CompTIA · Coursera Specialization

View Verify

Dec 2025

Certified Cybersecurity Educator Professional (CCEP)

Red Team Leaders

View Verify

Oct 2025

Cyber Threat Intelligence 101 (Foundation TIA)

arcX

Professional Summary

Technical Skills

Offensive Security

Defensive Security

Forensics & Malware

Programming & Scripting

Tools & Platforms

Operating Systems & Frameworks

Professional Experience

Penetration Tester

Cybersecurity Intern, SOC & Security Tooling

Independent Security Researcher & Open Source Developer

Key Projects

NetSnoop

CortexCLI

VortexTunnel

SSHield

SecureDork

System-Auditor

Education

BS in Cyber Security

Certifications & Achievements

CompTIA PenTest+ (PT0-002)

Certified Cybersecurity Educator Professional (CCEP)

Cyber Threat Intelligence 101 (Foundation TIA)

CSI Linux Certified Investigator (CSIL-CI)

Introduction to Cyber Investigations

Mastering Reverse Engineering & Malware Analysis (REMASM+)

How To Hack The Box To Your OSCP (Part 1)

How To Hack The Box To Your OSCP (Part 2)

How To Hack The Box To Your OSCP (Part 3)

Cybersecurity Threat Hunting for SOC Analysts

Reverse Engineering 3: x64dbg Graphical Static Analysis

Become a Digital Forensics Investigator with Autopsy

The Ultimate Wireshark Course

MITRE ATT&CK Framework

TryHackMe Advent of Cyber 2024

Cybercrime & Forensics Lab Internship

Digital Pakistan Cybersecurity Hackathon 2024 (Training Workshop)

Get the full resume