Bilal Shah

Conducted cross tenant security monitoring and incident response via Microsoft Lighthouse & Microsoft XDR Solution for multiple enterprise clients. Performed threat investigation and triage using CrowdStrike, Microsoft Defender suite (MDE, MDI, Defender for Cloud Apps, etc.), and Entra ID. Executed containment actions including account disablement, device isolation, IOC blocking, and email quarantine/removal, etc. Provided incident reporting, root cause analysis, and coordinated escalation with customer

Designed and deployed a virtual penetration testing lab using Ubuntu and Kali Linux to simulate real-world attack scenarios. Developed structured use cases covering multiple attack techniques, enabling users to practice exploitation and defensive validation in a controlled environment. Built a customizable lab framework allowing users to deploy various operating systems and create tailored environments for security testing and research.

Performed application security assessments on in-house desktop solutions handling sensitive client and employee data. Executed vulnerability analysis and coordinated remediation efforts with developers to improve secure coding practices. Applied DISA STIG and ISO 27001 control frameworks to strengthen internal network security and compliance readiness.

Conducted penetration testing for web, mobile, and desktop applications to identify vulnerabilities across multiple technology stacks. Collaborated with DevOps engineers to perform continuous security scanning, including open port discovery and insecure service identification. Partnered with QA teams to execute load and stress testing to evaluate application performance, stability, and resilience under high traffic conditions. Delivered vulnerability reports with risk ratings and remediation guidance to

Part of team implementing CIS/DISA controls for corporate organizations Learnt how companies achieve ISO 27001 certificate Penetration Testing of assets