Meher A.

About

I am a dedicated Cybersecurity Professional with a strong focus on Penetration Testing. My experience includes working as a Security Engineer, where I identified and reported over 100 critical vulnerabilities across various applications, leading to a significant reduction in security incidents through effective remediation efforts. I have successfully integrated security into the Software Development Life Cycle (SDLC) by implementing STRIDE threat modeling and mandatory security code reviews, enhancing both vulnerability detection and risk identification.

In my role, I enhanced application security by deploying automated SAST/DAST tools such as SonarQube and Veracode within CI/CD pipelines, which expedited the detection-to-fix time for critical vulnerabilities by 30%. I have also mitigated risks associated with Log4j vulnerabilities by conducting red teaming exercises and providing actionable recommendations for developers.

Previously, as a Web Application Pen Tester Intern, I conducted thorough security testing, discovering and exploiting critical vulnerabilities from the OWASP Top 10. I automated the reconnaissance and scanning processes using Nmap and custom Python scripts, which improved test coverage and efficiency. I produced detailed reports that included proof-of-concept exploits and prioritized remediation strategies.

My early experience as a Cybersecurity Intern allowed me to collaborate with senior testers to evaluate various security systems, contributing to post-exploitation analysis and compliance with PCI DSS standards. I also executed red team simulations to assess user awareness and incident response workflows.

Through these experiences, I have developed a robust skill set in cybersecurity with a proactive approach to risk management and vulnerability assessments.

Skills

• Penetration Testing
• Nmap
• Vulnerability Management
• Application Security
• Compliance & Audit
• PCI-DSS
• Python

Experience

• Cybersecurity Engineer

  Cybertrust America

  Jun 2025 — Present

• Security Analyst

  University of Maryland, College Park

  Aug 2024 — May 2025

• Security Engineer

  DXC Technology

  Jun 2022 — Aug 2023

4 experiences in total

Education

• University of Maryland - College Park

  Master of Engineering, Cybersecurity

  Aug 2023 — May 2025