[ ACCESS GRANTED ] CYBERSECURITY PORTFOLIO

Ahmad Razin Bin Azman

Cybersecurity consultant with experience in web applications, APIs, mobile applications, internal and external networks, source code, cloud environments and security configuration assessments across multiple industries and regions.

About Me

I am a cybersecurity professional focused on penetration testing and security assessments. My experience covers banking systems, stock market trading platforms, retail applications, automotive systems and telecommunication environments. I have performed security assessments for organisations across Malaysia, Indonesia, Singapore, Thailand, Vietnam and Europe.

Core Security Skills

Web Application Penetration Testing API Penetration Testing Mobile Application Security Testing Internal and External VAPT PCI ASV External Source Code Security Review Network Configuration Security Review Wireless Security Assessment Thick Client Penetration Testing Social Engineering Assessment Chatbot AI Penetration Testing AWS Cloud Security Audit Assessment

Professional Certifications

Click the badge or verification button to view the official credential.

Professional Career

Professional experience in penetration testing, security assessment and cybersecurity consulting.

SEC Consult Malaysia

Cyberjaya, Selangor, Malaysia · Hybrid

CURRENT ROLE

Senior Security Consultant

July 2026 – Present

Leading and delivering security assessments to identify vulnerabilities, validate security risks and strengthen clients' overall security posture.

  • Lead and perform penetration testing for web applications, APIs, mobile applications and internal or external networks.
  • Review technical findings, attack scenarios and potential business impact.
  • Prepare technical reports, management summaries and remediation recommendations.
  • Support project delivery, remediation verification, vulnerability retesting and collaboration with clients and global teams.

Security Consultant

September 2024 – July 2026

Conducted penetration testing, security reviews and remediation verification across application and infrastructure environments.

  • Performed penetration testing for web applications, APIs, mobile applications, internal networks and external networks.
  • Conducted security configuration reviews for firewalls, network devices and enterprise technologies.
  • Reviewed application architecture, source code and deployment configurations for security weaknesses.
  • Validated attack scenarios and identified potential technical and business impact.
  • Prepared technical reports, management summaries and remediation recommendations.

ASK Pentest Sdn Bhd

Kuala Lumpur, Malaysia

Security Consultant

March 2022 – September 2024

Delivered penetration testing and security assessment services across financial services, government, telecommunications, healthcare and enterprise environments.

  • Performed web, API, mobile, thick client, wireless and internal or external network penetration testing.
  • Conducted vulnerability assessments using automated and manual testing techniques.
  • Reviewed source code, application architecture and deployment configurations.
  • Performed security configuration reviews for servers, network devices and enterprise systems.
  • Prepared technical reports, executive summaries and remediation guidance for stakeholders.

Security Consultant Intern

October 2021 – March 2022

Supported web and mobile application penetration testing, vulnerability assessments and security reporting activities.

Language Skills

Malay Native
English Fluent

Most Important Project References

Selected security assessment experience across multiple industries and regions.

PROJECT_REFERENCE_01

Security Assessment for Banking Systems and Premises — Malaysia

  • Internal and External Network Vulnerability Assessment and Penetration Testing
  • PCI ASV External
  • API Penetration Testing
  • Web Application Security Assessment and Penetration Testing
  • Mobile Application Security Assessment and Penetration Testing
  • Source Code Security Review
  • Network Configuration Security Review
PROJECT_REFERENCE_02

Security Assessment for Banking System — Indonesia

  • Web Application Security Assessment and Penetration Testing
  • Mobile Application Security Assessment and Penetration Testing
  • Source Code Security Review
PROJECT_REFERENCE_03

Stock Market Trading Platform Security Assessment — Thailand

  • Thick Client Application Penetration Testing
  • Web Application Security Assessment and Penetration Testing
  • Social Engineering Assessment
PROJECT_REFERENCE_04

Stock Market Trading Platform Security Assessment — Vietnam

  • Mobile Application Security Assessment and Penetration Testing
PROJECT_REFERENCE_05

Security Assessment for Banking System — Singapore

  • Web Application Security Assessment and Penetration Testing
  • Mobile Application Security Assessment and Penetration Testing
  • Source Code Security Review
  • Wireless Security Assessment
  • Internal and External Network Vulnerability Assessment and Penetration Testing
PROJECT_REFERENCE_06

Security Assessment for Retail Company — Europe

  • API Penetration Testing
  • Web Application Security Assessment and Penetration Testing
  • Chatbot AI Penetration Testing
PROJECT_REFERENCE_07

Security Assessment for Automotive Company — Europe

  • API Penetration Testing
  • Web Application Security Assessment and Penetration Testing
PROJECT_REFERENCE_08

Security Assessment for Telecommunication Company — Singapore

  • Mobile Application Security Assessment and Penetration Testing
  • Web Application Security Assessment and Penetration Testing
  • AWS Cloud Security Audit Assessment
[ CONFIDENTIALITY NOTICE ] Client names and sensitive project information have been intentionally generalised.

CVE Research

Security vulnerability research and responsible disclosure.

CVE
RESEARCH IN PROGRESS

CVE Discovery Coming Soon

No CVE has been assigned yet. Currently researching security vulnerabilities and exploring opportunities for responsible disclosure.

razin@research:~$ searching_for_zero_day --status active

Educational Background

Bachelor of Computer Science (Computer Security) (Hons)

Universiti Teknikal Malaysia Melaka (UTeM)