Muhammad Hasaan Shah

About

Cybersecurity analyst and operations leader with hands-on experience in penetration testing, digital forensics, and AI-driven threat intelligence. Experienced in leading cross-functional teams, building forensic toolkits, and applying automation to strengthen security posture.

Experience

• Internship, Team Lead
  National Forensic Agency
  May 2025 – Present
• Manager, Operations & Team Leadership
  Hedex Software Ltd
  May 2024 – Present
• Forensic 3D Evidence Modeling
  National Forensic Agency
  May 2025 – 2025

Education

• Bachelor of Science in Cyber Security
  Air University
  Cyber Security · Sep 2022 – Jul 2026
• Intermediate in Pre-Engineering
  Karwan Model College
  Pre-Engineering · 2020 – 2022
• Matriculation (Science)
  Army Public School
  Science · 2018 – 2020

Skills

• Ethical Hacking
• Network Security
• Digital Forensics
• Secure Coding
• Penetration Testing
• Red Teaming
• Exploit Development
• Vulnerability Assessment
• Information Security
• Database Security
• Data Protection
• OSINT
• Script Automation
• Malware analysis
• AI Security
• Code Auditing
• cyber defense

Projects

• Ethical Hacking Lab Simulations

  Conducted controlled attack simulations, including developing and deploying custom malware to test endpoint resilience and system security. Demonstrated cookie hijacking and session-theft techniques in a lab environment, deepening practical understanding of web security flaws and browser exploitation.

• DeepExploit
  AI-powered penetration testing framework

  Customized the open-source DeepExploit framework, applying reinforcement learning to autonomously identify and assess system vulnerabilities. Integrated AI-driven decision-making to enable dynamic exploit selection based on real-time scan results, improving testing efficiency.

• SPECTRA
  Digital forensic toolkit

  Spearheaded design and development of a multi-device digital forensic toolkit supporting evidence acquisition, metadata indexing, and automated artifact analysis. Engineered core forensic modules, including Registry, USB, and Browser forensics, enabling timeline reconstruction and cross-device activity correlation. Built a modular, plugin-extensible architecture compatible across diverse operating systems and storage media.

Courses & certifications

• Certified Ethical Hacker (CEH v11)