Mehedi Hasan

Cybersecurity Consultant | Trusted by Banking, Telecom & Government Organizations

Private Site • Fulltime

Sep 2021 - Present • 4 yrs 11 mos

I am a cybersecurity consultant with over 6 years of hands-on experience helping organizations identify, validate, and remediate security vulnerabilities across web applications, mobile applications, APIs, cloud environments, and enterprise systems. My professional experience spans cybersecurity consulting in large-scale enterprise environments, where I have assessed digital platforms serving millions of users. Throughout my career, I have worked with highly regulated organizations across the financial, telecommunications, public, healthcare, and enterprise sectors, helping them strengthen their security posture against real-world threats. I currently work in offensive security and red team operations at a global consulting company, conducting advanced assessments of web applications, mobile applications, APIs, cloud infrastructure, and attack simulations for large organizations. My work has led to the discovery of critical vulnerabilities, including Account Takeover, Remote Code Execution (RCE), SQL Injection, Privilege Escalation, Authentication Bypass, and complex business logic flaws. The impact and quality of my findings have contributed to follow-on security engagements and long-term client relations. Previously, I led application security initiatives within a major financial institution, where I assessed approximately 100 web, mobile, and API applications, identified more than 500 critical vulnerabilities, and collaborated closely with engineering teams to integrate security into the Software Development Life Cycle (SDLC). Earlier in my career, I worked in cybersecurity consulting, delivering penetration testing, secure code reviews, vulnerability assessments, and security advisory services for organizations across multiple industries. Alongside consulting, I contribute to cybersecurity education as a Teaching Assistant in a graduate-level cybersecurity program and as a professional instructor, delivering hands-on security training.