Ehtisham.E

Red Team Operator

Digiinn360 • Full time

Dec 2025 - Present • 10 mos

Lead full-cycle Active Directory assessments against enterprise environments — from initial enumeration and BloodHound attack-path analysis through domain compromise and post-exploitation • Consistently identify and exploit ACL misconfigurations, password reuse across services, weak and guessable credentials, and exposed command-line history to achieve privilege escalation • Execute stealth-focused red team operations with disciplined OPSEC, simulating real-world adversary behaviour within Windows and Linux enterprise networks • Conduct web application penetration tests aligned with OWASP Top 10 and PTES methodologies, delivering riskrated findings backed by proof-of-concept evidence • Produce professional client-ready technical reports with detailed attack chains, CVSS scoring, and prioritised remediation roadmaps for technical and executive audiences

Junior Penetration Tester -- Penetration Tester

Andromeda • Full time

Nov 2024 - Apr 2026 • 1 yr 5 mos

• Conducted web application, internal network, and infrastructure security assessments for enterprise clients across multiple industries (all engagements under NDA) • Directly involved in engagements resulting in the compromise of 200+ Linux servers and 120+ Windows servers and endpoints through chained vulnerability exploitation • Performed VAPT using industry-standard methodologies, identifying critical vulnerabilities including authentication weaknesses, misconfigured services, and privilege escalation paths • Participated in internal security research, exploit validation, and proof-of-concept development alongside senior consultants • Produced professional penetration testing reports with risk ratings, remediation guidance, and executive-level summaries; maintained strict confidentiality throughout all engagements