Open to Penetration Testing & Security Analyst roles

Abdur Rahman Nahid

Penetration Tester | Web Application Security

I find and exploit security weaknesses in web applications and networks — before attackers do — and deliver clear, prioritized remediation that engineering teams can act on. Offense-driven. Remediation-focused.

View My Work Contact Me
Dhaka, Bangladesh [email protected]
About

Offense-driven defense

Penetration tester with hands-on experience in web application security, vulnerability assessment, and network security testing. Skilled in OWASP Top 10 exploitation techniques and professional security reporting, with demonstrated ability through CTF competitions and controlled lab environments.

As an Apprentice in Cybersecurity & Ethical Hacking at Ostad, I apply the OWASP Testing Guide and PTES methodologies to every assessment — from reconnaissance to structured reporting with risk ratings and remediation recommendations.

I'm currently seeking an entry-level penetration testing or security analyst position where I can turn offensive findings into real defensive strength.

01

Methodology-first testing

Every engagement follows OWASP & PTES — no guesswork, no missed attack surface.

02

Proof over theory

Every finding is validated through actual exploitation in authorized, controlled environments.

03

Reports that get fixed

Risk-rated findings with clear remediation steps developers can implement immediately.

Capabilities

Technical skills

Penetration Testing

  • Web Application Testing
  • Network Security Assessment
  • Vulnerability Scanning
  • Security Auditing

Web Security

  • OWASP Top 10
  • SQL Injection
  • Cross-Site Scripting (XSS)
  • CSRF & Authentication Bypass

Security Tools

  • Burp Suite · SQLMap · Nikto
  • Metasploit Framework
  • Nmap
  • Wireshark

Operating Systems

  • Kali Linux
  • Parrot OS
  • Linux Administration
  • Windows

Scripting

  • Python Scripting
  • Bash Scripting
  • Automation for recon & testing

Reporting

  • Vulnerability Documentation
  • Risk Assessment
  • Technical Report Writing
Experience

Professional journey

Nov 2025 — Present

Apprentice — Cybersecurity & Ethical Hacking

Ostad · Remote
  • Completed practical labs covering web application penetration testing and network security assessments.
  • Participated in CTF competitions applying exploitation and offensive security techniques.
  • Performed vulnerability assessments on DVWA and WebGoat, identifying OWASP Top 10 vulnerabilities.
  • Produced structured penetration test reports including risk ratings and remediation recommendations.
  • Applied OWASP Testing Guide and PTES methodologies throughout all assessments.
Portfolio

Selected projects

CTF Challenges & Writeups

Competed in multiple CTF events across web exploitation, network, and digital forensics categories. Published detailed technical writeups documenting attack methodology, tools used, and remediation guidance.

CTFWeb ExploitationForensicsWriteups

Web Application Security Assessment

Conducted full security assessments on DVWA and WebGoat targeting SQL Injection, XSS, CSRF, and broken authentication. Used Burp Suite to intercept and manipulate HTTP traffic to identify and exploit security weaknesses.

OWASP Top 10Burp SuiteDVWAWebGoat

Network Penetration Testing Lab

Performed network reconnaissance, scanning, and post-exploitation using Nmap, Metasploit, and Wireshark in a controlled environment. Documented all findings in structured penetration test report format.

NmapMetasploitWiresharkReporting
Blog

Writing & walkthroughs

TryHackMe Walkthrough

Bash Scripting — TryHackMe

A complete beginner-friendly walkthrough of the Bash Scripting room — syntax, variables, parameters, arrays, conditionals and debugging, with a cheat sheet.

Sep 2026·TryHackMe
Read on Medium
Networking

SSH for Beginners: Control Any Computer From Your Terminal

No experience needed — if you can open a terminal, you can learn SSH. A practical introduction to remote administration, secure connections and file transfers.

Jun 2026·Linux / DevOps
Read on Medium
Cybersecurity

More stories on Medium

New walkthroughs, security notes and practical guides are published regularly on my Medium profile. Follow along for future posts.

Updated regularly·@arnahid
View all articles
Follow on Medium
Credentials

Certifications

✓

Pre-Security Certificate

TryHackMe · 2025

Foundational security training covering networking, web fundamentals, and Linux — pathway into penetration testing.

View Certificate ↗
✓

Cyber Security & Ethical Hacking

Ostad · Career Track

Hands-on apprenticeship covering web app pentesting, network assessments, CTFs and professional reporting (OWASP & PTES).

Cyber Security & Ethical Hacking certificate — Abdur Rahman Nahid (Ostad)
Certificate — Cyber Security & Ethical Hacking, Ostad
Pre-Security Certificate — Abdur Rahman Nahid (TryHackMe)
Certificate — Pre-Security, TryHackMe

Think your application is secure?
Let's prove it.

Available for penetration testing engagements, vulnerability assessments, and entry-level security roles. Based in Dhaka, Bangladesh — working remotely worldwide.

✉ [email protected]