Hisan Mahmood

- Security research on automotive systems across VW Group brands, driving assigned projects end-to-end on IVI and connected ECU platforms. - Perform hardware and firmware exploitation on embedded automotive targets via firmware dumping from flash chips (NAND, SPI NOR) and identifying UART/JTAG interfaces, followed by reverse engineering using IDA Pro / Ghidra to identify and remediate critical vulnerabilities. - development for Azure infrastructure security mapped to the MITRE ATT&CK framework

- Managed a cross-functional advisory practice of 12+ direct reports spanning penetration testing, red teaming, IT audit, and ISO-27001 governance, overseeing team performance, technical escalations, and engagement delivery, while reporting engagement risk and remediation strategy to senior leadership. - Directed information security GAP assessments against ISO-27001 controls for automotive and financial sector clients, defining risk exposure and driving remediation roadmaps at the executive level.

Led a 3-person red team assessment for a data center services provider, directing a physical penetration strategy using custom Raspberry Pi payloads that resulted in compromise of critical internal servers.

- Delivered enterprise wide penetration testing and DAST engagements across automotive, aviation, banking, and logistics clients, managing simultaneous project timelines and client relationships. - Led red team and cyber threat hunting engagements for international banks, coordinating spear-phishing simulations, memory/log analysis, and SOC assessments to strengthen client detection capabilities.