Faris Mohammed

About Faris Mohammed

I\'m a graduate in Computer Science and Engineering from Cochin University of Science and Technology. I also hold a Diploma in Computer Engineering. My expertise lies in Penetration Testing for Web, API, Network, Android, iOS and Thickclient, which has been developed through hands-on project insights, extensive experience, and dedicated research. Additionally, it has been enhanced by various certificate courses, cybersec community support, conferences, blogs, and certifications such as OSCP, CEH and CRTP.In my professional tenure since 2018, I have undertaken a variety of roles. Presently at IBM ISL, I serve as a Pentester within the IBM Cloud Red Team, concentrating on offensive security assessments. Previously, I focused on reverse engineering Android applications at Cognizant to identify malicious apps. During this time, I worked closely with the Google Play Protect team.Before this, while working at ValueMentor, I started as a Security Analyst specialising in offensive security, steadily advancing to a Team Lead position. This role provided me with exposure to cybersecurity challenges on a global scale through consulting engagements.Additionally, I actively participate in training initiatives for faculty and students, as well as competing in various Capture The Flag competitions.My professional journey commenced at Tata Communications, where I served as a Submarine Cable Landing Station Engineer. This role provided invaluable insights into telecommunications infrastructure, contributing significantly to the enhancement of my cybersecurity skill set.As an Offensive Security Engineer, I thrive on unraveling the inner workings of systems, probing for vulnerabilities, and dissecting them to uncover their weak spots.

Experience

1. Cloud - Red Team Pentester

   IBM

   May 2022 — Present · Bengaluru, IN

   Penetration testing on web, API, network, and other infrastructure of various IBM cloud products.Acquired knowledge of IBM Undercloud architecture and multiple cloud services offered to IBM Cloud users.Leveraged a broad range of security expertise including web application security, RESTful API security, network security, operating system security, and cloud services security to proactively identify and mitigate potential vulnerabilities and threats.Acquired knowledge in Kubernetes and pods security testing and its implementation.Analyzed complex systems and applications using threat modeling techniques to identify possible security threats and vulnerabilities.Created several Python and Bash scripts to automate recurring tasks throughout penetration testing projects.Participated in multiple CTF competitions, gaining a thorough understanding of various security concepts and techniques, and utilizing them to test for security vulnerabilities and misconfigurations.Conducted segmentation testing to ensure that network segments are appropriately isolated and safeguarded.Generated extensive vulnerability reports and leveraged open-source tools to detect and exploit security vulnerabilities.Attended multiple in-house training sessions at IBM on popular technologies and programming languages utilized in IBMcloud such as Golang and microservices.Utilized my skills and experience as a valuable asset in enhancing the security posture of the IBM Public Cloud.

Education

• MES Central School, Tirur

  CBSE,

  2000 — 2012

• Ma'din Polytechnic College Malappuram

  Diploma, Computer Engineering

  2012 — 2015

• Model Engineering College

  Bachelor of Technology - BTech, Computer Science and Engineering

  2015 — 2018