Md Shabbir Hossain Khan

Emerging Cyber Security Analyst with a strong foundation in enterprise security, cyber risk management, and governance, risk, and compliance (GRC) principles. Experienced in supporting security assessments, incident response fundamentals, and data protection within regulated and high-trust environments. Proven ability to work in 24/7 SOC-style operations. Brings hands-on exposure to security monitoring, vulnerability testing, and risk identification through formal cybersecurity training and practical project work. Australian Citizen with eligibility to obtain security clearance if required.

• Defensive Security Project, Simulated brute force and DoS attacks against a test FTP server using Kali Linux, Implemented HIDS and NIDS with Splunk for real-time detection and alerting, Conducted SQL injection attacks on a controlled XAMPP-hosted environment, Analysed logs and attack patterns to validate SIEM effectiveness
• Offensive Security Project, Performed ethical hacking exercises against DVWA, Exploited SQL injection and DoS vulnerabilities in a controlled lab environment, Documented findings and remediation insights