Mehedi Hasan

Consultant, Cyber Security (Red Team Operations) at a Big Four consulting firm

Jul 2025 - Present • 1 yr 3 mos

Security consultant on the cyber security team of a Big Four consulting firm, delivering penetration testing and red-team operations for banks and telecom operators. What I do: • Web application, API, mobile (Android and iOS) and network penetration tests, performed by hand against OWASP WSTG, OWASP MASVS, the OWASP API Security Top 10 and PTES, with every finding verified before it is reported • Red-team operations: adversary-style campaigns across internet-facing systems and internal networks, reported as attack paths with business impact rather than isolated issues • Regulated environments: engagements scoped and documented to PCI DSS and central-bank requirements, producing evidence that auditors accept • Reporting for two audiences: executive summaries that set priorities for management, and technical findings with CVSS severity, reproduction steps, screenshots and a specific fix for each issue • Retesting and remediation support with client engineering teams until findings are closed Recognized multiple times by clients for the quality of findings and delivery.

Senior Cybersecurity Consultant at a U.S. Based Cybersecurity Firm

Apr 2024 - Present • 2 yrs 6 mos

• Conduct web, API, mobile, and cloud penetration testing to identify and validate security vulnerabilities across client environments. • Perform manual vulnerability assessment and exploitation, including authentication, authorization, business logic, injection, and API security testing. • Conduct Active Directory and internal network security assessments, identifying privilege escalation and lateral movement opportunities. • Develop detailed penetration testing reports, documenting technical findings, business impact, proof-of-concept evidence, and actionable remediation recommendations. • Collaborate directly with clients and technical teams to communicate security risks, validate remediation, and strengthen overall security posture.