Azaz Ahmed M Dobiwala

About Azaz Ahmed M Dobiwala

Azaz Ahmed Dobiwala is an Penetration Tester and Full Stack Security consultant with overall 15 years of experience in Information Security.He possess a detailed knowledge of security tools, technologies and best practices.Degree: Bachelor in Computer Application (BCA).Certifications: Offensive Security Certified Professional (OSCP), Certified Security Analyst (ECSA), Ethical Hacker (CEH), Cisco Certified Network Associate Routing & Switching (CCNA), CCNA Security, Cisco Certified Network Professional Security (CCNP Security), Cisco ASA Specialist, Cisco Firewall Security Specialist, Cisco VPN Security Specialist, Cisco IOS Security Specialist, and Certified Secure Computer UserSpecialties: Web application Penetration Testing Web Service & REST API Penetration Testing Thick-client & Thin client Penetration testing Network Penetration Testing Secure Network Architecture Review Vulnerability Assessment Wireless Network Penetration Testing Secure Configuration Review DLP (Data Loss Prevention) Firewall Management & Rule-set Reviews VPN Administration & Security Active Directory (2003,2008,2012,2016) DevOps ManagementWorked as an on-site Consultant at multiple client locations to conduct various Web application Penetration Testing, Network Penetration Testing and also, Secure Network Architecture Review.Using tools: Nmap, Netcat, Burp Suite Pro, Acunetix Web Vulnerability Scanner, HP WebInspect, IBM Rational Security AppScan Enterprise and Standard Edition, Netsparker, SoapUI, Rapid7 Nexpose, Nessus, Metasploit, Foundstone SiteDigger, CORE Impact Pro, Immunity Canvas, Sqlmap, Security Compass Exploit-Me (SQL Inject Me and XSS Me), OWASP Zed Attack Proxy (ZAP), Nikto, and many more.Future Goals: OSWE, OSCE, CISSP

Experience

1. Associate Lead Cybersecurity - Red Team

   AT&T

   Jul 2025 — Present · Hyderabad, IN

   Leading Cyber Security - Red Team for Internal and external penetration testing (plan, discover, attack, report)Perform White & Black Box testing for Network and Web application (manually and with tools such as Burp, Ffuf, Nikto, SqlMap, BeefXss, Hydra, Metasploit, PowerSploit, Nishang, Power Tools, Veil-Framework, etc)Conduct vulnerability assessment and review results. Collaborate with clients IT staff to rank vulnerabilities and validate high risk vulnerabilities on specific targets.Establish and/or encourage ongoing vulnerability management process (scan, assess, patch, report)Effectively communicate with technical/non-technical personnel before, during, and after engagement.Research emerging threats, develop test plan environment, test exploit, tools in lab prior to deployment in production environment and also help Threat Intel Team for advanced threat detection and response.Implement Solutions within traditional and cloud-based infrastructure (GCP/AWS/Azure) based on company standards and best practices.Integration for various products with SIEM (Splunk, Qradar, Chronicle)

Education

• Veer Narmad South Gujarat University, Surat

  Bachelor of Computer Application (B.C.A), Information Technology

  2009 — 2013

• EC-Council University

  CEH, Computer and Information Systems Security/Information Assurance

  2012 — 2012

• Meclosys Information Services

  CEH v7, Computer and Information Systems Security/Information Assurance

  2012 — 2012

• IHT

  Integrated Diploma in Computer Hardware and Network Engineering, Information Technology

  2008 — 2010

• Sir J.J English School

  HSC, Higher Education

  1994 — 2009

• IIHT

  ICSP, Information Technology

  2012 — 2013

• South Gujarat University

  BCA, Computer Softwares & Web Developers

  2009 — 2012

Skills

• Penetration Testing
• Ccna Security
• Cisco Security
• Network Engineering
• Radius
• Microsoft Certified Technology
• Cisco Firewall Security
• Zone Based Firewall
• Ospf
• Ecsa
• Amazon Web Services (Aws)
• Whm
• Open Source Intelligence (Osint)
• Website Development
• Networking Solutions
• Mcsa: Windows Server 2012
• Information Security
• Firewalls
• Plesk
• Ccna
• Cisco Certified
• Mcts
• Network Security
• Mcse: Windows Server 2012
• Pci Dss
• Tacacs+
• Vulnerability Assessment
• Chfi
• Google Cloud Platform
• 802.1x
• Osstmm
• Security
• Cisco Vpn
• Oscp
• Cisco Ios
• Iso 27001
• Web Application Security
• Ips
• Application Security
• Asa