Ministry of Power, Energy and Mineral Resources
SIEM for critical infrastructure
Deployed and tuned a production SIEM on live infrastructure.
Work
Organisations I have
helped secure
21+
At Cyberlog, I work across offensive and defensive security, supporting government and private-sector organisations in Bangladesh. My work ranges from penetration testing and security assessments to SIEM deployment, incident analysis, consulting, and security awareness training. I also contribute to cybersecurity product development and actively research and develop AI-integrated autonomous security solutions.
At Bugsbd I tested web applications, APIs, networks and Android applications for organisations in banking, healthcare and enterprise.
Alongside the testing, I ran on-site audits, mapped observed attack behaviour to MITRE ATT&CK, and wrote remediation reports against OWASP, NIST, ISO/IEC 27001, PCI DSS and HIPAA.
Selected Projects
Government agency
Red team assessment
Led a red team assessment that simulated a real adversary, from initial access through to reporting and remediation guidance.
State-owned commercial bank
Banking security assessment
Vulnerability assessment and penetration testing, with remediation guidance for the bank’s security team.
Adcomm Limited
Security awareness training
Designed and delivered a security awareness training programme for the company’s staff.
Cyberlog Limited
Prohoree 365
Co-designed Bangladesh’s first unified cybersecurity solution.
Fintech and digital payments
Fintech security assessment
Vulnerability assessment and penetration testing of customer-facing financial platforms.
Pharmaceutical manufacturer
Pharmaceutical security assessment
Vulnerability assessment and penetration testing across 30+ in-scope assets, covering web applications, APIs and network infrastructure.
Multinational energy company
Energy sector security assessment
Vulnerability assessment and penetration testing, followed by remediation support.
Recognition
