TR
Talal RehanSecurity · Web Dev · AI
HIRE ME
Available Now
Available for Projects ◆ Contracts ◆ Cybersecurity & AI Consulting ◆ 1:1 Sessions ◆ Courses & Training Get in Touch — talalrehan6@gmail.com Available for Projects ◆ Contracts ◆ Cybersecurity & AI Consulting ◆ 1:1 Sessions ◆ Courses & Training Get in Touch — talalrehan6@gmail.com
About Services Experience Skills Projects Builds Certifications Hire Me
TR
LAHORE, PK — REMOTE-READY / UTC+5
Open to Hire & Freelance Projects
>

Hunting threats.
Shipping products.
Leading both, securely.

Cybersecurity Analyst, Full-Stack Web Developer, and AI Solutions Builder with 3+ years across alert triage, penetration testing, and vulnerability management — currently monitoring 50+ daily security events at HackerOne, shipping secure web & AI-powered applications, and training the next generation of security professionals.

Hire Me View GitHub
OWASP TOP 10 BURP SUITE SIEM / SOC API SECURITY FULL-STACK DEV AI / CHATBOTS CEH · EJPT · SEC+ · GCIH DIRECTOR, CYBERSECURITY & AI
live_career_feed.log
MONITORING · 50+ ALERTS TRIAGED DAILY
Featured Work
0
Years in Security
0
Daily Alerts Triaged
0
Unauthorized Access Cut
0
Certifications
01 — ABOUT

Built on the SOC floor, sharpened in the pentest lab.

I'm a cybersecurity professional and full-stack developer working across security operations, web/API penetration testing, vulnerability management, and secure application development. At HackerOne I monitor and triage 50+ security alerts a day across web applications and network infrastructure, holding a sub-2-hour mean response time on critical incidents — while investigating unauthorized API access attempts and hardening authentication mechanisms.

Outside of day-to-day operations, I build things end-to-end: a custom SIEM panel with real-time log ingestion and rule-based attack detection, full-stack web and mobile products (FastAPI, Next.js, React Native), and AI-powered tools including a conversational AI chatbot I recently shipped. I also teach — as a Cybersecurity Instructor at IT Simpleara, I've trained 200+ students in OWASP Top 10, network security, and ethical hacking fundamentals, and I run corporate cybersecurity awareness workshops on request.

"AI explains. Deterministic detection rules decide." — the same principle I bring from building solver systems into building SIEM logic: triage should be reasoned, reproducible, and explainable.
STATUS: MONITORING

Always scanning — from alert triage to bug bounty research, security is a 24/7 mindset, not a shift.

Lahore, Punjab, Pakistan BS Cyber Security, Superior University English & Urdu (Fluent) Open to Remote & Freelance github.com/Legend112537
02 — SERVICES

What I can do for your team, product, or platform.

Cybersecurity Services

  • Web Application Security Testing
  • API Security Testing
  • VAPT (Vulnerability Assessment & Penetration Testing)
  • Ethical Hacking
  • Penetration Testing
  • OWASP Top 10 Assessment
  • Vulnerability Assessment
  • Security Audit & Security Review
  • Bug Bounty Support
  • OSINT & Reconnaissance
  • Network Security Assessment
  • Authentication & Authorization Testing
  • IDOR & Broken Access Control Testing
  • JWT & Session Security Testing
  • IAM & Active Directory Security
  • SOC & Security Monitoring Support
  • Incident Response Support
  • Cybersecurity Awareness Training

Web & Software Development

  • Full-Stack Web Development
  • Frontend Development
  • Backend Development
  • Python & FastAPI Development
  • REST API Development
  • Database Development
  • Secure Web Application Development
  • Dashboard & Admin Panel Development
  • GPS & Real-Time Tracking Systems
  • Docker-Based Application Deployment

AI & Automation

  • AI Solution Development
  • AI-Powered Web Applications
  • Business Process Automation
  • AI & Cybersecurity Solutions
  • Intelligent Data-Driven Applications
  • AI Research & Prototyping

Specialized Solutions

  • Driver Tracking & Management Systems
  • Universal Calculator Development
  • AgriVision / Smart Agriculture Solutions
  • Event Technology Solutions
  • Custom Business Software

Training & Consulting

  • Cybersecurity Training
  • Ethical Hacking Training
  • Web/API Security Training
  • VAPT Training
  • SOC Analyst Training
  • OSINT Training
  • Linux & Windows Security Training
  • IAM & Active Directory Training
  • Cybersecurity Awareness Workshops
  • Technical Mentoring & Consulting
03 — EXPERIENCE

A track record across SOC, AppSec, and training.

Aug 2026 — Present

Assistant Director – Cybersecurity & Director of AI

Global Engineering Network for Innovation and Intelligence (GEN_II) · Islamabad (Part-time)
  • Dual mandate spanning AI strategy/product leadership and cybersecurity consulting
  • Leads AI strategy, solution design, and implementation for client-facing products, including AI chatbot integration and customer-support automation
  • Provides cybersecurity consulting, VAPT, and web/API security assessments, translating findings into prioritized remediation plans
  • Owns technical project planning, client requirements analysis, and security architecture design across engagements
  • Leads international client communication — technical demonstrations, proposals, and pricing/negotiation discussions
  • Delivered a guest lecture, "Cybersecurity in the Digital Age," on digitalization and security risk awareness
  • Directs website development and optimization workstreams (performance, SEO, conversion) alongside AI feature integration
Nov 2025 — Mar 2026

Security Analyst — SOC Operations

HackerOne · Remote
  • Triage 50+ daily alerts across web apps and network infrastructure, sub-2-hour mean response on critical incidents
  • Investigate unauthorized API login attempts, reducing unauthorized access incidents by ~35%
  • Conduct RBAC reviews and purple-team simulations, uncovering 10+ misconfigured policies
  • Designed and operated a custom SIEM monitoring panel and Attack Detection Log Tool, cutting false positives by ~20%
Jun 2026 — Aug 2026

Cybersecurity Instructor / Trainer

IT-SIMPLERA (Part-time)
  • Delivered hands-on OWASP Top 10, ethical hacking, and Red Team fundamentals training through practical labs
  • Designed lab-based exercises and mentored students 1-to-1 and in groups via live online sessions
2026 — Present

Founding Security Advisor & Co-Founder (50/50 Partner)

NexusLang / NexusShop (Part-time)
  • Co-founded both ventures as an equal partner with joint ownership and shared strategic decision-making
  • Advises on security architecture review, threat modeling, and security-by-design for the NexusLang runtime and its APIs
  • Provides penetration-testing guidance and incident-response planning for NexusShop's e-commerce platform
  • Advises on Pakistan-market-specific security and compliance considerations for both ventures
Oct 2025 — Dec 2025

SOC Analyst — Security Operations

Confidential Client · Remote
  • Triaged events via Splunk / Microsoft Sentinel lab, correlating network, endpoint, and auth logs to detect IOCs
  • Investigated phishing campaigns, malware alerts, and suspicious endpoint activity, reducing dwell time via rapid containment
  • Contributed to detection-rule tuning, reducing false positives by ~20%
Oct 2023 — Oct 2024

Security Intern — Vulnerability Analysis

Remote Vulnerability Research Program
  • Tested web apps and REST APIs against OWASP Top 10, identifying IDOR, broken auth, and business-logic flaws
  • Used Burp Suite to validate vulnerabilities and document reproducible PoCs with CVSS scores
Ongoing

Freelance Security Researcher

Independent / Bug Bounty
  • Conducts web/API penetration testing, VAPT, and OSINT-based security research for independent clients
  • Active on HackerOne: 9 reports submitted, including IDOR/BOLA research on Airbnb Wishlist metadata
04 — SKILLS

A stack built for detection, exploitation, and reporting.

Security Operations

  • Alert triage & incident response
  • IOC analysis & log correlation
  • Threat detection & root cause analysis

Penetration Testing

  • Web app & API security testing
  • IDOR exploitation, session manipulation
  • Burp Suite, Kali Linux

Network & Traffic

  • Wireshark, Nmap, packet analysis
  • TCP/IP, DNS, HTTP/HTTPS, ICMP, Syslog

SIEM & Monitoring

  • Splunk & Microsoft Sentinel (lab)
  • Custom-built SIEM panel & alert tuning

Frameworks

  • OWASP Top 10, MITRE ATT&CK
  • REST API Security, NIST CSF

Web & AI Development

  • Full-stack: React/Next.js, Node.js, FastAPI, Flutter
  • AI-powered apps & chatbots, REST APIs, PostgreSQL
  • Secure-by-design development, Docker deployment

AI & Automation

  • AI-assisted vulnerability analysis
  • Prompt engineering for security automation
  • RAG fundamentals, LLM & AI security, private/enterprise AI deployment

IAM & Identity Security

  • RBAC, SSO, MFA, privileged access management
  • Active Directory, LDAP, Kerberos
  • OAuth, OpenID Connect, SAML, JWT, cloud IAM

OSINT & Reconnaissance

  • Subdomain/asset enumeration & attack-surface discovery
  • DNS, WHOIS & metadata analysis, technology fingerprinting
  • Shodan, Censys, Maltego, theHarvester, Amass, Subfinder

Security Engineering & GRC

  • Threat modeling & security architecture/design review
  • Vulnerability & risk management, attack-surface management
  • Security controls assessment & hardening

Web Application Security

  • IDOR/BOLA, broken access control, SSRF, injection flaws
  • Auth & authorization bypass, JWT/OAuth security
  • Business-logic vulnerabilities, GraphQL security basics

Bug Bounty & Vulnerability Research

  • Responsible disclosure & vulnerability validation
  • CVE & exploit research, attack-surface discovery
  • Active on HackerOne — reconnaissance-driven bug hunting

Consulting & Training

  • Technical/security advisory & stakeholder communication
  • Cybersecurity & red team training, course development
  • Vulnerability reporting & remediation guidance

Tools & technology arsenal

Web / API Security

Burp Suite ProOWASP ZAPPostmanInsomniaSwagger / OpenAPISoapUIHTTPiemitmproxyCaidoJWT.ioBrowser DevTools

Network Security

NmapWiresharkMasscanTcpdumpNetcatZeekSuricataBettercapEttercapOpenVPNpfSense

Exploitation / Pentesting

MetasploitSQLmapNiktoNucleiGobusterDirsearchFFUFFeroxbusterHydraJohn the RipperHashcat

Active Directory / Windows

BloodHoundNetExecImpacketMimikatzRubeusKerbrutePowerViewEvil-WinRMLDAPSearchResponder

Recon / OSINT

AmassSubfinderAssetfinderhttpxShodanCensysMaltegotheHarvesterRecon-ngSpiderFootDNSReconFierceWHOISSecurityTrailscrt.sh

SOC / SIEM

SplunkMicrosoft SentinelWazuhElastic SecurityElasticsearchKibanaLogstashGraylogIBM QRadarSecurity OnionSysmonMicrosoft Defender for EndpointEntra IDNessusOpenVAS

Programming, Cloud & DevOps

PythonBashPowerShellJavaScriptFastAPIFlaskNode.jsSQLPostgreSQLMySQLGit / GitHub / GitLabDockerKubernetesAWS Security ToolsTrivySemgrepJiraServiceNow
05 — SECURITY TOOLING

Self-built tools, from the GitHub archive.

Custom SIEM Panel & Attack Detection Log Tool

Real-time log ingestion engine, alert dashboard, and rule-based attack-detection pipeline flagging brute force, privilege escalation, and lateral movement — with MITRE ATT&CK tagging on every alert.

SIEMLog CorrelationMITRE ATT&CK
github.com/Legend112537/SIEM-Tool1

Attack Detection Log Analysis

A log-analysis pipeline detecting and classifying attack patterns from multi-source security logs, extending the detection logic used in the custom SIEM panel with documented, reusable rules.

Log AnalysisDetection Rules
github.com/Legend112537/Attack-Detection-Log-Analysis-

SOC Log Anomaly Detector

Flags unusual authentication and access patterns to support faster identification of indicators of compromise across authentication and access logs.

Anomaly DetectionIOC
github.com/Legend112537/SOC-Log-Anomaly-Detector1

SOC Analyst Portfolio

Consolidated portfolio of SOC engineering, detection, and incident-response work — SIEM tooling, log-analysis pipelines, and documented playbooks in one place.

PlaybooksSOC Engineering
github.com/Legend112537/SOC-Analyst-portfolio-project
ALSO ON RECORD — TRAINING & RESEARCH
LAB SOLUTION

Linux Active Directory (Samba AD)

End-to-end domain provisioning, OU/group/user management, and access control on a self-hosted Samba AD lab.

AWARENESS TRAINING

Social Engineering Awareness (EN/UR)

Bilingual training material illustrating common vishing/phishing scripts to build employee recognition skills.

RESEARCH

Social Engineering & Quishing Risk Analysis

Hack The Box research into phishing patterns, QR-code phishing tactics, and human-factor vulnerability mitigation.

06 — DASHBOARDS IN ACTION

The kind of screens I watch every shift.

SOC Center security dashboard with active threats, blocked attacks, and system health
SOC CENTER

Real-time threat monitoring — active threats, blocked attacks, network traffic, and system health at a glance.

CISO dashboard showing incidents, anomalies, and risky users
CISO OVERVIEW

Incident trends, flagged anomalies, and risky-user scoring — the executive view of security posture.

NOC monitoring dashboard with threshold breakers and performance metrics
NOC VIEW

Threshold breakers, availability, and performance widgets — the network-ops side of the same monitoring stack.

07 — DEVELOPED PROJECTS

Full product builds — architecture, features & security baked in from day one.

AgriVision

AI-powered weather & agri-advisory app for farmers — hyper-local forecasts, AI-generated irrigation and spray recommendations, disease alerts, and satellite/IoT soil-moisture integration at the top tier. Bilingual interface (English & Urdu) for accessibility across literacy levels.

FlutterNode.jsPostgreSQLFirebase

Universal Calculation Solver

An intelligent quantitative workspace spanning math, physics, chemistry, engineering, statistics, and finance — natural-language input turned into verified, step-by-step solutions. AI handles interpretation and explanation; deterministic symbolic/numerical engines handle the actual computation, so results are never hallucinated.

Next.jsFastAPISymPyNumPy/SciPy

FastPay

A PayPal/Payoneer-style cross-border digital wallet — multi-currency balances, send/receive by phone, email, or QR, mass payouts for freelancers and businesses, and a flat 1% fee model. Built around a double-entry ledger, real-time fraud scoring, and a compliance stack (KYC, AML/CFT, sanctions screening) designed to the regulatory bar a licensed EMI has to clear.

FastAPIPostgreSQLRedisKMS/WAF

Fleet & Driver Tracking System

Secure, real-time vehicle/driver tracking platform built for a government/defense-sector client. Location sharing via secure token-based WhatsApp links with no separate driver app required; central owner/admin dashboard, trip history, and shift-lock controls. Designed for scalability from small fleets up to 500+ vehicles; tested via secure remote tunneling. Full responsive dashboard and driver-tracking front end built in-house.

FastAPIPostgreSQL 16DockerHTML5/CSS3/JS

AI Customer Support & Business Automation

Integrated AI chatbots into client websites for customer-support automation, FAQ handling, and lead engagement — part of the AI strategy and product work at GEN_II. Includes the website-embedded chatbot widget and supporting front-end interaction flows, plus broader AI-powered business-automation workflows.

GEN_IIAI ChatbotsAutomation

Event Technical Support Suite

End-to-end event-technology workflow delivered at GEN_II (ORO Events/GCC use case): registration, QR passes/check-in, agenda management, certificates, and reporting. Developed the web-based registration, QR check-in, and administrative dashboard interfaces.

GEN_IIQR Check-inWeb Dashboard

NexusShop — E-Commerce Web Application

Contributed to e-commerce web application architecture, API integration, and authentication/access-control design alongside security-by-design review, as Founding Security Advisor & Co-Founder.

E-CommerceSecurity-by-DesignCo-Founded

Tinder-Like Web Application

Client project covering user registration/login, profiles, matching logic, real-time chat, and dashboards, built with security-focused architecture throughout.

Client ProjectReal-time ChatAuth & Matching

OSINT Investigation Platform (Concept)

OSINT orchestration concept unifying username/email/domain/phone/IP/company/URL investigations across multiple APIs, with entity-relationship graphing, investigation-depth controls, source/timestamp tracking, and confidence-indicator scoring.

OSINTMulti-APIGraphing

API Security & Access-Control Research Lab

Controlled lab with intentionally vulnerable Node.js/Express API endpoints simulating IDOR, BOLA, and token-misuse scenarios across three user roles. Produced reproducible PoC reports and remediation patterns later adopted in secure-coding training.

Node.js/ExpressIDOR/BOLASecure Coding

AI Chatbot Assistant

A conversational AI chatbot built on an LLM backend with context-aware memory, custom prompt engineering, and a REST API layer — designed as a drop-in support/FAQ assistant that can be embedded into any web or mobile product.

PythonLLM / NLPFastAPIPrompt Engineering

Remote CCTV Viewer

A unified mobile viewing layer for CCTV/NVR footage across camera brands — RTSP/ONVIF ingestion, transcoded to HLS/WebRTC for mobile playback, with push alerts on motion events. Architecture evaluated against P2P cloud relay, DDNS+port-forward, and VPN-based access, weighing setup effort against privacy exposure for each.

RTSP/ONVIFWebRTCFFmpegFCM/APNs
08 — CERTIFICATIONS

Verified, industry-recognized credentials.

Certified Ethical Hacker (CEH)

eLearnSecurity Junior Pentester (eJPT)

CompTIA Security+

GIAC Certified Incident Handler (GCIH)

EC-Council Certified SOC Analyst (CSA)

API Security Fundamentals / OWASP Top 10

Deloitte Australia — Cyber Job Simulation

Cisco Networking & TCP/IP Fundamentals

HTB Academy — Intro to Information Security & Networking

Google AI Essentials & Prompting

Let's talk — security hire, web/AI build, or your next pentest.

talalrehan6@gmail.com +92 300 7695931 LinkedIn github.com/Legend112537