Syed Ghazanfar A.-Information Security Consultant
Check rate
Experience
Information Security Consultant
AGP Glass
- Developed and updated security and privacy policies, standards, guidelines, and procedures across the organization.
- Prepared updates to the security framework in line with changing threats and evolving compliance standards such as TISAX, ISO 27001, NIS 2, DORA, and IATF.
- Led collaboration with CSIRT and technical teams to define functional security requirements for ongoing IT initiatives.
- Assessed and mitigated vulnerabilities across network, cloud, and application layers.
- Communicated cyber risks and security posture improvements to senior management and executive leadership.
- Ensured regulatory compliance and actively participated in internal and external audit cycles.
Cyber Security Consultant and Vulnerability Management Specialist
Extra United Electronics
- Led Red Team operations to identify and address security vulnerabilities.
- Conducted comprehensive vulnerability assessments across various systems.
- Performed application security testing for mobile and web applications, in line with OWASP Top 10 principles.
- Performed security testing and source code reviews of applications developed using .NET, Java, PHP, Python, JavaScript, Spring, and AngularJS.
- Established and implemented black box and white box penetration testing methods for thorough security evaluations.
- Conducted quarterly infrastructure risk assessments to proactively identify and mitigate vulnerabilities.
- Specialized in cloud security assessments, focusing on Azure and software as a service (SaaS) cloud environments.
- Contributed to the organization's risk management strategy by identifying potential security threats and recommending proactive measures.
- Collaborated with the team to achieve desired outcomes and contribute to its success.
Cyber Security Specialist
Pakistan Telecommunication Authority
- Assessed vulnerabilities in OS, network, DBMS, cloud infrastructure, applications, and end-users.
- Established National Telecom Security Operation Center (nTSOC).
- Worked as a CSIRT analyst.
- Developed security guidelines in accordance with national telecom regulation (CTDISR).
- Conducted security audits of Pakistan telecom licensees in accordance with Critical Telecom Data Infrastructure Regulation (CTDISR).
- Coordinated and collaborated with cellular mobile operators on cybersecurity issues and activities.
- Developed customized reports on software vulnerability assessment operations for IT teams and relevant stakeholders.
- Deployed and assessed Fortinet FortiGate web application firewall (WAF) and investigated potential escalations related to various attack types.
- Assisted with patching recommendations and developed workarounds for zero-day threats.
- Coordinated with senior management to improve the organization’s security posture.
- Collaborated with other teams to build a secure national telecom ecosystem, including voice technologies (VoIP and SS7) and network elements.
- Maintained strong knowledge of wireless technologies and wireless network security.
Vulnerability Management & SOC Specialist
State Bank of Pakistan
- Conducted software vulnerability assessments of the bank’s critical IT infrastructure, including SWIFT applications and servers.
- Worked daily with security monitoring and log solutions, reporting and presenting findings to senior management.
- Deployed, operated, and maintained security incident monitoring and log solutions using standard SIEM technology, integrating them with existing IT infrastructure components.
- Reviewed and managed IT incident reports and followed up with IT operations to resolve identified security and procedural issues.
- Coordinated and collaborated with IT operations on security monitoring issues and activities.
- Shared IT security alerts and advisories with IT operations teams after analysis.
- Undertook and completed other tasks and assignments as assigned by the supervisor.
Cyber Security Consultant
Ernst & Young
- Coordinated with clients on projects related to penetration testing, social engineering, and ISO 27001.
- Conducted security awareness sessions for multiple clients.
- Developed and implemented security frameworks based on NIST, CIS, OWASP, and ISO 27001 guidelines.
- Researched security updates and coordinated with the senior team.
- Performed network configuration audits and security reviews, and implemented relevant project processes.
Application Security Analyst
Habib Bank Limited
- Performed information systems security reviews and risk assessments of critical IT assets.
- Conducted vulnerability assessments and management.
- Carried out source code reviews and analysis.
- Ensured IT infrastructure was developed and operated in full compliance with information security policies.
- Prepared reports on vulnerability assessments of network devices (switches, routers, IDS, firewall) and configuration assessments of domestic and international network devices.
- Performed manual and automated hardening of databases (SQL Server 2008, 2012) and operating systems (Windows Server 2003, 2008, 2012) on AIX servers.
- Conducted PCI hardening and vulnerability assessments from UAT to live environments.
- Provided information assurance and risk assessment support using established security and risk management solutions.
- Carried out risk assessments for various applications and systems.
- Monitored WAF events covering critical web applications.
- Executed web application black-box and white-box security tests using automated tools and manual exploration.
- Maintained an understanding of Android and iOS security landscapes and operating system internals.
- Understood mobile application security concepts (e.g., OWASP and SANS).
System Administrator and Developer
XORSAT (Pvt) Ltd
- Configured and installed VMware vSphere.
- Installed and configured server-side applications, including Apache, MySQL, LAMP, FTP, and SMTP.
- Performed network configuration and network security tasks.
- Conducted penetration testing.
- Worked as a backend developer for PHP/MySQL and web services JSON parsing.
- Gained knowledge of front-end development using HTML, CSS, JavaScript, and AJAX.
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Telecommunication, Banking and Finance, Manufacturing, and Professional Services.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Product Development, Operations, and Quality Assurance.
Summary
Dedicated and highly skilled Cyber Security Engineer with over 10 years of experience protecting digital assets and holding renowned certifications, including CISM, CISA, and many others. Expertise in data confidentiality, integrity, and availability, vulnerability management, and penetration testing. Extensive experience in Banking, Telecom, and Government Regulatory domains. Proficient in developing and maintaining strong security infrastructures.
Skills
My Expertise Includes Ci/Cd Devsecops, Continuous Integration, Continuous Deployment, And Continuous Monitoring. Proficient In Configuration Management And Infrastructure Automation Tools, I Advocate For Integrating Security Throughout The Development Lifecycle.
I Bring Strong Skills In Cloud Security Assessment, Demonstrated By Conducting Risk Assessments For Projects Using Saas, Iaas, And Paas Cloud Services In Hybrid Environments.
Vulnerability Management: Proficient In Tenable Nessus, Rapid 7 Insightvm, And Qualys.
Penetration Testing: Extensive Experience In Ethical Hacking And Penetration Testing Using Metasploit And Kali Linux.
Security Tools And Programming Languages: Proficient In Using Security Tools And Programming Languages, Including But Not Limited To Metasploit, Nessus, Nexpose, Splunk, Qradar, Burp Suite, Python Scripting, Power Shell, .Net, Java, Php, Javascript, Spring, Angularjs, And Various Antivirus Solutions.
Compliance And Auditing: Extensive Experience Ensuring Compliance With Industry Standards (E.G., Iso 27001, Nis 2, Dora, Nist, Gdpr, Tisax) And Conducting Security Audits To Meet Regulatory Requirements.
Languages
Education
NED University of Engineering and Technology
Master of Science, Computer Science and Information Technology · Computer Science and Information Technology · Karachi, Pakistan
National University of Computer and Emerging Sciences
Bachelor of Science, Telecommunication · Telecommunication · Pakistan
Certifications & licenses
Advanced Web Application Penetration Testing (eWPTX)
INE Security
Certified Azure Red Team Professional (CARTP)
Altered Security
ISO/IEC 27001 Information Security Associate
SkillFront
Amazon Web Services (AWS)
Certified Appsec Practitioner (CAP) SecOps
Certified In Cyber Security (CC)
ISC2
Certified Information Security Auditor (CISA)
ISACA
Certified Information Security Manager (CISM)
ISACA
Certified Ethical Hacker V 9.0 (C|EH)
EC-Council
Certified Devsecops Professional (CDP)
Practical Devsecops
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Syed Ghazanfar is based in Brussels, Belgium.
Syed Ghazanfar speaks the following languages: English (Advanced), French (Elementary), Dutch (Elementary).
Syed Ghazanfar has at least 13 years of experience. During this time, Syed Ghazanfar has worked in at least 7 different roles and for 7 different companies. The average length of individual experience is 2 years and 10 months. Note that Syed Ghazanfar may not have shared all experience and actually has more experience.
Based on recent experience, Syed Ghazanfar would be well-suited for roles such as: Information Security Consultant, Cyber Security Consultant and Vulnerability Management Specialist, Cyber Security Specialist.
Syed Ghazanfar's most recent position is Information Security Consultant at AGP Glass.
In recent years, Syed Ghazanfar has worked for AGP Glass, Extra United Electronics, and Pakistan Telecommunication Authority.
Syed Ghazanfar is most experienced in industries like Information Technology, Telecommunication, and Banking and Finance. Syed Ghazanfar also has some experience in Manufacturing and Professional Services.
Syed Ghazanfar is most experienced in business areas like Information Technology, Product Development, and Operations. Syed Ghazanfar also has some experience in Quality Assurance.
Syed Ghazanfar has recently worked in industries like Telecommunication, Manufacturing, and Information Technology.
Syed Ghazanfar has recently worked in business areas like Information Technology and Operations.
Syed Ghazanfar holds a Master in Computer Science and Information Technology from NED University of Engineering and Technology and a Bachelor in Telecommunication from National University of Computer and Emerging Sciences.
Syed Ghazanfar has 10 certificates. Among them, these include: Advanced Web Application Penetration Testing (eWPTX), Certified Azure Red Team Professional (CARTP), and ISO/IEC 27001 Information Security Associate.
The availability of Syed Ghazanfar needs to be confirmed.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 11 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Niels A.
Markus W.
Stefan R.
Valeri M.
Matthias S.
Erlijn V.
Federico L.
Stephan S.
Christian G.
Alexander S.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Information Security Consultant
Christian D.
Adrianna L.
Nikolaus B.
Daniel J.
Fabian F.
Thierry B.
Max C.
Christian F.
Thomas U.
Bernhard B.
Nearby freelancers
Professionals working in or nearby Brussels, Belgium
Youssef A.
Nicolas V.
Gayatri D.
Stoyan Z.
Omonefe O.
Luc M.
Andrea S.
Sylvain M.
Hichem E.
Girish B.
