whoami

I’m Anas Bin Izhar, an Information Security Professional with 5+ years of professional experience having keen interest in application & cloud security. I have been privileged to work on both offensive and defensive side of infosec spectrum.

In most of my roles I was responsible for application security, doing security testing on new features and then leading developers in the mitigation process. In addition to that, I have worked closely with blue team and assisted them in responding to various internal/external incidents and threats. Also, we worked together to fine tune our response mechanisms to mitigate False Positives and added context to our incident response systems.

ISO27001, SOC2 & PCI-DSS are few IS Governance standards that I have worked with.

Since I treat Infosec as a hobby, so apart from 9-5 I have done few side hustles:

  • Conducted 100+ Penetration Tests for various clients
  • Top Rated Freelancer on Upwork with 12+ happy clients
  • Worked with HackerRank for making screening questions for Application Security
  • Cyber Security Mentor for Thinkful ( a Chegg service)
  • Submitted multiple security vulnerabilities via Hackerone and private bug bounty programs (not actively doing it for some time now)