Sayeed Anwar

Malware Analysis & Security Expert

CMBD • Temps partiel

Nov 2025 - Present • 8 mos

Conduct in-depth malware and threat analysis to identify vulnerabilities and mitigate risks. Perform penetration testing, reverse engineering, and incident investigation to strengthen system security. Develop and implement security measures, including antivirus strategies and threat detection protocols. Collaborate with development teams to ensure secure software deployment and maintain compliance standards. Continuously monitor, research, and respond to emerging cyber threats to safeguard critical assets.

Cyber Security Engineer

BRAC • Temps plein

Jan 2024 - Present • 2 yrs 6 mos

Conducted comprehensive vulnerability assessments and penetration testing of web applications, APIs, WordPress websites, Linux servers, and network environments following OWASP Top 10 and industry best practices. Identified, validated, and documented security vulnerabilities, including SQL Injection (SQLi), Cross-Site Scripting (XSS), CSRF, IDOR, authentication, and access control issues, with prioritized remediation recommendations. Performed reconnaissance, vulnerability scanning, manual security testing, and risk analysis using Burp Suite, Nmap, Nessus, Metasploit, OWASP ZAP, Wireshark, Nikto, SQLmap, and WPScan. Investigated website compromises, conducted malware analysis and removal, restored infected websites, and implemented post-incident security hardening to prevent reinfection. Assessed and strengthened the security posture of WordPress, PHP, Linux, cPanel, and Cloudflare environments through configuration reviews and security hardening. Produced detailed technical security assessment reports, proof-of-concept documentation, executive summaries, and actionable remediation guidance for clients and stakeholders. Collaborated with developers and system administrators to remediate vulnerabilities, improve secure coding practices, and enhance overall application and infrastructure security. Supported incident response activities, root cause analysis, vulnerability management, and continuous security improvement initiatives to reduce organizational risk.