-
🔭 I'm currently working as a Penetration Tester at Securing Information Systems (Pvt) Ltd.
-
🛡️ I specialize in Mobile App Security (iOS & Android), API Penetration Testing, and Web Application Security
-
🎯 3+ years · 55+ engagements · 100+ vulnerabilities discovered · 10+ financial platforms secured
-
🏆 Certified: eMAPT · eWPT · CEH
-
💼 I help Fintech, Healthcare, and SaaS companies secure their mobile apps and APIs before attackers find them first
-
📋 I follow OWASP MASVS · MASTG · API Top 10 · WSTG · PTES · NIST SP 800-115
-
🔍 Ask me about Mobile Penetration Testing, API Security, OWASP Top 10, Frida, Burp Suite, JWT Attacks, BOLA/IDOR
-
📫 How to reach me: aliramzanakj@gmail.com
-
⚡ Fun fact: I've secured 10+ high-profile financial applications — the most critical vulnerabilities are often the ones hiding in plain sight inside the mobile binary.
| Area | Coverage |
|---|---|
| 📱 Mobile Security | iOS & Android · APK/IPA Reverse Engineering · Frida · SSL Pinning Bypass · Jailbreak Bypass |
| 🔌 API Security | REST & GraphQL · BOLA · JWT · OAuth 2.0 · Mass Assignment · SSRF |
| 🌐 Web Security | OWASP Top 10 · SQLi · XSS · IDOR · Broken Access Control · Business Logic |
| 🏢 Network Security | Corporate Network Assessments · Cloudflare WAF · Perimeter Hardening |
| 📋 AppSec Consulting | Threat Modeling · Secure Code Review · SDLC Integration · Patch Validation |
- 🔴 Discovered 200+ vulnerabilities across mobile apps, APIs, web apps, and enterprise networks
- 🏦 Secured 10+ high-profile financial and banking applications against compliance threats
- 📄 Authored 50+ professional pentest reports for enterprise and international clients
- 🌍 Delivered security assessments for 15+ international clients across fintech, healthcare, and SaaS
- 📈 Improved client compliance postures against OWASP, NIST, and ISO 27001 by 30%
- 👥 Integrated secure coding practices into SDLC pipelines across 3 enterprise development teams
