Mafizul Hoque

Chief Operating Officer

Metaphor Security LLC • Full time

Jan 2025 - Present • 1 yr 9 mos

As Chief Operating Officer at Metaphor Security, I lead the delivery and management of cybersecurity projects for clients across different industries. I work closely with security professionals and clients to identify vulnerabilities, assess security risks, and deliver practical recommendations to strengthen their systems. My experience includes Web Application Penetration Testing, API Security Testing, Mobile Application Security Testing, Vulnerability Assessment, Red Teaming, OSINT, Cloud Security, and security consulting. I have worked on multiple successful cybersecurity projects involving real-world security assessments and vulnerability identification. At Metaphor Security, we focus on providing practical, clearly documented security assessments that help organizations understand their security weaknesses and take meaningful steps toward remediation. Certifications include Certified Ethical Hacker (CEH), Certified Penetration Testing Professional (CPENT), and Licensed Penetration Tester (Master) (LPT Master). My goal is simple: help businesses identify security problems before attackers do and provide actionable solutions to improve their overall security posture.

Engineer, Security Operations ( Red Team )

EIC • Full time

Dec 2023 - Dec 2024 • 1 yr

Worked as a Security Operations Engineer specializing in Red Team operations, penetration testing, vulnerability assessment, and offensive security. Conducted security assessments of web applications, APIs, networks, and other IT environments to identify vulnerabilities and evaluate real-world attack scenarios. Responsibilities included reconnaissance and attack-surface discovery, vulnerability identification and validation, exploitation testing, privilege escalation, security configuration assessment, and preparation of detailed technical reports with remediation recommendations. Collaborated with security teams to communicate findings, validate remediation, and improve the overall security posture of client environments. Worked with industry-standard tools and methodologies for penetration testing and offensive security assessments.